A vulnerability in GitLab CE/EE versions from 17.9 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 allowed authenticated attackers to bypass access control restrictions and view GitLab Pages content intended only for project members by authenticating through OAuth providers. This issue has been remediated in the specified fixed versions.