GitLab Access Control Error Vulnerability (CNVD-2021-91183)

GitLab is a self-hosted, Git (version control system) project repository application developed in Ruby on Rails by GitLab, Inc. The application can be used to access a project’s file content, commit history, bug list, etc. An access control error vulnerability exists in GitLab CE/EE, which could be exploited by an attacker to resolve discussions and apply recommendations after the project owner locks out merge requests.