GitLab Access Control Error Vulnerability (CNVD-2021-99768)

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD (continuous integration and continuous delivery), and other features.GitLab CE/EE is vulnerable to an access control error that stems from the existence of GitLab CE/EE from 12.10 to 14.3.6 ago Faulty access control allows the author of a merge request to approve the merge request even after their access to the project has been revoked. No detailed vulnerability details are currently available.