CVE-2021-22213

Summary dbcve.org

This is a cross-site leak (XS-Leak) vulnerability in GitLab's OAuth authorization flow. An attacker can exploit timing differences or browser-specific behavior in Safari to extract the OAuth access token from the authorization callback response by tricking authenticated users into visiting a malicious webpage.

Mitigation

Users should avoid clicking untrusted links while authenticated to GitLab. GitLab should implement POST-based OAuth callbacks or token binding to prevent token leakage via XS-Leak attacks.