GitLab Access Control Error Vulnerability (CNVD-2021-91187)

GitLab is a self-hosted, Git (version control system) project repository application developed using Ruby on Rails by GitLab, Inc. The application can be used to access a project’s file content, commit history, bug list, etc. An access control error vulnerability exists in GitLab CE/EE, which stems from an improper access control flaw that exposes the private email addresses of issue and merge request transferees to Webhook data consumers. No detailed vulnerability details are currently available.