GitLab Access Control Error Vulnerability (CNVD-2021-91178)

GitLab is a self-hosted, Git (version control system) project repository application developed in Ruby on Rails by GitLab, Inc. The application can be used to access a project’s file content, commit history, bug list, etc. An access control error vulnerability exists in GitLab CE/EE, which can be exploited by an attacker to cause a child group member who inherits access to a project from a parent group to have access even after the child group is transferred.