GitLab Access Control Error Vulnerability (CNVD-2021-99766)

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD (continuous integration and continuous delivery), etc. GitLab CE/EE is vulnerable to an access control error, which stems from the existence of GitLab CE/EE from 12.10 to before 14.3.6 faulty access control allowing any project member to retrieve the help desk. No detailed vulnerability details are currently available.