UpHeron
All vulnerabilities

Servers and applications

CVE-2021-22236

Due to improper handling of OAuth client IDs, new subscriptions generated OAuth tokens on an incorrect OAuth client application. This vulnerability is present in GitLab CE/EE since version 14.1.

Severity
High 8.8
Published
25 Aug 2021
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
14.1.2
Sources
NVD

Affected software

SoftwareAffected versions
GitLabServers and applications · cpe:a:gitlab:gitlab
  • From 14.1.0 before 14.1.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-22236
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-22236