GitLab Access Control Error Vulnerability (CNVD-2021-91182)

GitLab is a self-hosted, Git (version control system) project repository application developed in Ruby on Rails by GitLab, Inc. The application can be used to access a project’s file content, commit history, bug list, etc. An access control error vulnerability exists in GitLab CE/EE, which can be exploited by an attacker to change the visibility level of a group or project via an API call to a restricted option even after the instance administrator has set that visibility option to restricted in settings.