An issue has been discovered in GitLab affecting all versions. Improper access control allows unauthorised users to access project details using Graphql.