VDB
CVE-2021-22236
CVE-2021-22236
PUBLISHED
Due to improper handling of OAuth client IDs, new subscriptions generated OAuth tokens on an incorrect OAuth client application. This vulnerability is present in GitLab CE/EE since version 14.1.
EPSS 0.22% · 45.3th percentile
Risk Scores
EPSS Score
0.22%
45.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 14.1.0 |
| Bitnami | gitlab | 14.1.0 |
Exploit Intelligence
Timeline
- Jul 1, 2021 CVE Published
- Aug 26, 2021 EPSS Score
- Oct 23, 2021 EPSS Score
- Dec 20, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 17, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Apr 16, 2022 EPSS Score
- Jun 13, 2022 EPSS Score
- Aug 11, 2022 EPSS Score
- Oct 8, 2022 EPSS Score
- Dec 5, 2022 EPSS Score