A brief look at Gitpod, two bugs, and a quick fix

This post details the discovery and exploitation of two vulnerabilities in Gitpod: a cross-origin WebSocket access vulnerability that allowed an attacker to obtain user OAuth tokens, and a login vulnerability that allowed an attacker to log in as any account on a self-managed GitLab instance by spoofing email addresses. Both vulnerabilities were reported to Gitpod and fixed promptly.