GitLab Information Disclosure Vulnerability (CNVD-2021-91180)

GitLab is a self-hosted, Git (version control system) project repository application developed using Ruby on Rails by GitLab, Inc. The application can be used to access a project’s file content, commit history, bug list, etc. An information disclosure vulnerability exists in GitLab CE/EE, which stems from the ability of a group’s administrator to view the group’s SCIM token by accessing a specific endpoint. No detailed vulnerability details are currently available.