Thanks to [3nvz](https://hackerone.com/3nvz) and GitLab team member Dennis Appelt for reporting this vulnerability

1 vulnerability record and advisories credit this contributor.