An issue was discovered in GitLab Community and Enterprise Edition before 11.4. It allows Directory Traversal.