An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 12.6. It has Incorrect Access Control.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-10699
https://about.gitlab.com/releases/2020/01/02/security-release-gitlab-12-6-2-released/