Medium
Security advisory
GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, permitting administrators with access to the logs to see another user's token.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2018-19583
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 07:30 UTC · Revision 1
Source evidence
GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, permitting administrators with access to the logs to see another user's token.
osv:CVE-2018-19583
Complete source record
{
"id": "1df43b81e372d663303705f7f1738144730ee304fe097993447830d3d5eb3a9c",
"url": "https://osv.dev/vulnerability/CVE-2018-19583",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2018-19583",
"summary": "GitLab CE/EE, versions 8.0 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, would log access tokens in the Workhorse logs, permitting administrators with access to the logs to see another user's token.",
"evidence": "osv:CVE-2018-19583",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2018-19583",
"aliases": [
"CVE-2018-19583"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://gitlab.com/gitlab-org/gitlab",
"type": "GIT",
"events": [
{
"introduced": "b50421f8650a390aa637da68c7e0138dd764fdf3"
},
{
"fixed": "97bf583178874e2617c347c33ca30b9b33b97402"
},
{
"introduced": "cfe266cbac3c5d413e9c061fff420630e517005f"
},
{
"fixed": "966cce5bfe657c7676dcc02125bb89bd3f067887"
},
{
"introduced": "cb71fca38c3de0c212685f97a46ee8426f63d301"
},
{
"fixed": "cab68f5d2035026e5e29ef68b79fdfe5ca90f947"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"range": [
{
"introduced": "8.0.0"
},
{
"fixed": "11.3.11"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
"range": [
{
"introduced": "8.0.0"
},
{
"fixed": "11.3.11"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"range": [
{
"introduced": "11.4.0"
},
{
"fixed": "11.4.8"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
"range": [
{
"introduced": "11.4.0"
},
{
"fixed": "11.4.8"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"range": [
{
"introduced": "11.5.0"
},
{
"fixed": "11.5.1"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
"range": [
{
"introduced": "11.5.0"
},
{
"fixed": "11.5.1"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"v11.5.0-ee"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-19583.json"
}
}
],
"modified": "2026-10-30T10:30:33.172559766Z",
"provider": "osv",
"references": [
"https://about.gitlab.com/2018/11/28/security-release-gitlab-11-dot-5-dot-1-released/",
"https://gitlab.com/gitlab-org/gitlab-workhorse/issues/182"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2018-19583",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 438100,
"published_at": "2019-07-10T17:15:11.927+00:00"
}