CVE catalog

CVE-2018-19583

UBUNTU-CVE-2018-19583

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.64% · Oct 27, 2026

GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, permitting administrators with access to the logs to see another user's token.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntugitlab16.048.4.3+dfsg-9vulnerable
Ubuntugitlab16.048.4.3+dfsg-12vulnerable
Ubuntugitlab16.048.5.8+dfsg-5vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References