CVE-2019-11605

An issue was discovered in GitLab Community and Enterprise Edition 11.8.x before 11.8.10, 11.9.x before 11.9.11, and 11.10.x before 11.10.3. It allows Information Disclosure. A small number of GitLab API endpoints would disclose project information when using a read_user scoped token.

• CWE-200

• https://about.gitlab.com/2019/04/30/security-release-gitlab-11-dot-10-dot-3-released/Release Notes, Vendor Advisory
• https://about.gitlab.com/2019/04/30/security-release-gitlab-11-dot-10-dot-3-released/Release Notes, Vendor Advisory

Published

Sep 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1160Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-11600A SQL injection vulnerability in the activities API in OpenP…
• CVE-2019-11601A directory traversal vulnerability in remote access to back…7.5
• CVE-2019-11602Leakage of stack traces in remote access to backup & restore…5.3
• CVE-2019-11603A HTTP Traversal Attack in earlier versions than ProSyst mBS…7.5
• CVE-2019-11604An issue was discovered in Quest KACE Systems Management App…
• CVE-2019-11606doorGets 7.0 has a sensitive information disclosure vulnerab…
• CVE-2019-11607doorGets 7.0 has a sensitive information disclosure vulnerab…
• CVE-2019-11608doorGets 7.0 has a sensitive information disclosure vulnerab…
• CVE-2019-11609doorGets 7.0 has a sensitive information disclosure vulnerab…
• CVE-2019-1161An elevation of privilege vulnerability exists when the MpSi…7.1
• CVE-2019-11610doorGets 7.0 has a sensitive information disclosure vulnerab…