CVE-2019-11605

7.5 highEPSS 1.2%

High (7.5) in gitlab gitlab. EPSS 1.2% chance of exploitation in the next 30 days.

An issue was discovered in GitLab Community and Enterprise Edition 11.8.x before 11.8.10, 11.9.x before 11.9.11, and 11.10.x before 11.10.3. It allows Information Disclosure. A small number of GitLab API endpoints would disclose project information when using a read_user scoped token.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2019-09-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gitlab:gitlab

References

https://about.gitlab.com/2019/04/30/security-release-gitlab-11-dot-10-dot-3-released/
https://about.gitlab.com/2019/04/30/security-release-gitlab-11-dot-10-dot-3-released/

Check your stack JSON