GitLab Community Edition (CE) and Enterprise Edition (EE). 9.6 and later up to and including 12.5 has Incorrect Access Control.
gitlab gitlab