CVE-2021-22213
A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to leak an OAuth access token by getting the victim to visit a m…
Published: 2021-06-08 · CVSS: 8.8 · CVSS 3.1
A cross-site leak vulnerability in the OAuth flow of all versions of GitLab CE/EE since 7.10 allowed an attacker to leak an OAuth access token by getting the victim to visit a malicious page with Safari
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7