GitLab 14.1 < 14.1.2 (CVE-2021-22236)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Due to improper handling of OAuth client IDs, new subscriptions generated OAuth tokens on an incorrect OAuth client application. This vulnerability is present in GitLab CE/EE since version 14.1...

CVE-2021-22236

creationtimestamp| type| source ---|---|--- 2021-08-25 22:26:07+00:00| seen| https://t.me/cibsecurity/27886...

CVE-2021-22236

GitLab CE/EE is affected by CVE-2021-22236 due to improper handling of OAuth client IDs, causing new subscriptions to generate OAuth tokens on an incorrect OAuth client application. Affected versions: GitLab CE/EE starting from 14.1 (up to before fixed). Practical impact per sources: potential un...

[ASA-202108-7] gitlab: multiple issues

Arch Linux Security Advisory ASA-202108-7 ========================================= Severity: High Date : 2021-08-10 CVE-ID : CVE-2021-22236 CVE-2021-22237 CVE-2021-22239 CVE-2021-22241 Package : gitlab Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-2251 Summary...