Information Disclosure

gitlab is vulnerable to Information Disclosure. This vulnerability exists in the way that GitLab handles project membership. An attacker can exploit this vulnerability by creating a project with a specific name and then adding themselves to the project as a project member. This will allow the attacker to bypass the authorization checks for the project and access the project’s data.