Gitlab open user registration
Description
Gitlab allows registering a new user. Therefore, an attacker may interact with Gitlab as an authenticated user.
Remediation
It's recommended to turn off user registration or require administrator approval for new sign ups