Gitlab Enterprise Edition version 10.3 is vulnerable to an authorization bypass issue in the GitLab Projects::BoardsController component resulting in an information disclosure on any board object.
https://hackerone.com/reports/301123
https://about.gitlab.com/2018/01/16/gitlab-10-dot-3-dot-4-released/