Possibilty to purchase Ultimate - 1 Year (EDU or OSS)

How it was found

Hi,

Any user can purchase Ultimate - 1 Year (EDU or OSS) which is for educational institutions or open source projects.I have found here https://gitlab.com/gitlab-org/customers-gitlab-com/-/issues/860 list of Gitlab plan id and found Ultimate - 1 Year which is free and purchased.

Steps to reproduce:

Login in to your account https://customers.gitlab.com/ And go to https://customers.gitlab.com/subscriptions/new?plan_id=2c92a0fd63afe3fd0163d87aecee230a&transaction=create_subscription

Best, @steppe

Impact

Attacker can bypass GitLab for Education Program Requirements.