GitLab Community Edition (CE) and Enterprise Edition (EE) up to and including 12.5 has Incorrect Access Control (issue 2 of 2).
gitlab gitlab