Issues from public projects are displayed when a user creates a milestone with a common name
Summary
When you click on the Milestones
menu in the navbar on GitLab.com, it displays a list of Milestones. Under each milestone, its number of issues are displayed, If you click on any of the milestones that have a common name like a version number, You get a lot more issues, some of which belong to public projects you have no relationship with.
Steps to reproduce
For example, when I visited https://gitlab.com/dashboard/milestones, I noticed a milestone called MVP:
You can see it reads 3 issues, but when you click to see the issues, you get a lot more issues, see:
You can also see this video for reference: https://drive.google.com/file/d/0B8AHQSzOuZ0nMUNCa24xWlloNlU/view
What is the current bug behavior?
Lists issues from any public project that has similar milestone name.
What is the expected correct behavior?
Limit issues displayed in the general milestone dashboard to projects you own or that belongs to a group you are part of.
Output of checks
This bug happens on GitLab.com
Customer Ticket: https://gitlab.zendesk.com/agent/tickets/83390 (Internal)