CVE-2021-22213: GitLab

Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days.

A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to leak an OAuth access token by getting the victim to visit a malicious page with Safari

Affected products

• GitLab GitLab: from 7.10.0, before 13.10.5 (fixed in 13.10.5); from 13.11.0, before 13.11.5 (fixed in 13.11.5); from 13.12.0, before 13.12.2 (fixed in 13.12.2)

Published 2021-06-08. Last modified 2026-06-17.