PYSEC-2015-33

2015-02-1615:59:00

Google

osv.dev

0.001 Low

EPSS

Percentile

37.1%

JSON

RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method.

CPENameOperatorVersion
rhodecodeeq1.2.4
rhodecodeeq1.3.4
rhodecodeeq1.4.0
rhodecodeeq1.3.6
rhodecodeeq1.1.0
rhodecodeeq2.2.5
rhodecodeeq1.2.3
rhodecodeeq1.7.0
rhodecodeeq1.1.1
rhodecodeeq1.5.3

Name	Operator	Version
rhodecode	eq	1.2.4
rhodecode	eq	1.3.4
rhodecode	eq	1.4.0
rhodecode	eq	1.3.6
rhodecode	eq	1.1.0
rhodecode	eq	2.2.5
rhodecode	eq	1.2.3
rhodecode	eq	1.7.0
rhodecode	eq	1.1.1
rhodecode	eq	1.5.3

Rows per page:

1-10 of 391

References

rhodecode.com/blog/rhodecode-enterprise-security-release/

0.001 Low

EPSS

Percentile

37.1%

JSON

Related for OSV:PYSEC-2015-33