Improper Limitation of a Pathname to a Restricted Directory in GitLab 10/10 | Dark Hacker News