GitLab 10.7 and later through 12.7.2 has Incorrect Access Control.
{ "severity": "Critical", "cpes": [ "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*" ] }