High severity8.8NVD Advisory· Published Jun 8, 2021· Updated Jun 17, 2026
CVE-2021-22213
CVE-2021-22213
Description
A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to leak an OAuth access token by getting the victim to visit a malicious page with Safari
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 3 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=7.10.0,<13.10.5
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=7.10.0,<13.10.5
- (no CPE)range: >= 7.10
- (no CPE)range: >=7.10, <13.10.5
- Range: >= 7.10
Patches
Vulnerability mechanics
References
3- gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22213.jsonnvdVendor Advisory
- hackerone.com/reports/1089277nvdPermissions RequiredThird Party Advisory
- gitlab.com/gitlab-org/gitlab/-/issues/300308nvdBroken Link
News mentions
0No linked articles in our index yet.