CVE-2015-0260

RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the getrepo API method...

PT-2015-4549

Name of the Vulnerable Software and Affected Versions RhodeCode versions prior to 2.2.7 Kallithea version 0.1 Description The issue allows remote authenticated users to obtain sensitive information, including API keys, by utilizing the "get repo" API method. Recommendations For RhodeCode versions...

CVE-2015-1613: Exposure of Sensitive Information to an Unauthorized Actor

RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the 1 updaterepo, 2 getlocks, or 3 getusergroups API method...

CVE-2015-0260: Exposure of Sensitive Information to an Unauthorized Actor

RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the getrepo API method...

PT-2015-5389

Name of the Vulnerable Software and Affected Versions RhodeCode versions prior to 2.2.7 Description The issue allows remote authenticated users to obtain sensitive information, including API keys, by exploiting certain API methods. Specifically, the "update repo", "get locks", and "get user group...