CVE-2019-11605

HIGH 7.5CVE-2019-11605 · Published 09/09/2019 · updated 17/06/2026

In short

CVE-2019-11605 is a HIGH (CVSS 7.5) vulnerability affecting gitlab (gitlab).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.4% of all vulnerabilities.
Fix: update to 11.10.3, 11.8.10, 11.9.11 or later.

Package	Affected versions	Patched versions
gitlab gitlab	`≥ 11.10.0, < 11.10.3≥ 11.8.0, < 11.8.10≥ 11.9.0, < 11.9.11`	`11.10.311.8.1011.9.11`

Description

An issue was discovered in GitLab Community and Enterprise Edition 11.8.x before 11.8.10, 11.9.x before 11.9.11, and 11.10.x before 11.10.3. It allows Information Disclosure. A small number of GitLab API endpoints would disclose project information when using a read_user scoped token.

References

about.gitlab.com/2019/04/30/security-release-gitlab-11-dot-10-dot-3-released · Release Notes

More vulnerabilities in gitlab

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gitlab

≥ 11.10.0, < 11.10.3≥ 11.8.0, < 11.8.10≥ 11.9.0, < 11.9.11

11.10.311.8.1011.9.11

More vulnerabilities in gitlab

See all →