EIP-2026-114701

This exploit demonstrates a user enumeration vulnerability in GitLab CE 13.10.3 by leveraging the sign-up page's username validation endpoint. An unauthenticated attacker can brute-force usernames via the `/users/<username>/exists` endpoint to determine valid users based on the JSON response.