CVE-2015-0260

CVE-2015-0260 affects RhodeCode prior to 2.2.7 and Kallithea 0.1, where remote authenticated users can obtain API keys and other sensitive information via the get_repo API method. Multiple connected sources (GitHub advisory GHSA-HHX9-4VW2-X54R, Veracode entry, NVD entry, and OSV/PYSEC records) co...

PT-2015-4549

Name of the Vulnerable Software and Affected Versions RhodeCode versions prior to 2.2.7 Kallithea version 0.1 Description The issue allows remote authenticated users to obtain sensitive information, including API keys, by utilizing the "get repo" API method. Recommendations For RhodeCode versions...

CVE-2015-1613: Exposure of Sensitive Information to an Unauthorized Actor

RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the 1 updaterepo, 2 getlocks, or 3 getusergroups API method...

CVE-2015-0260: Exposure of Sensitive Information to an Unauthorized Actor

RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the getrepo API method...

PT-2015-5389

Name of the Vulnerable Software and Affected Versions RhodeCode versions prior to 2.2.7 Description The issue allows remote authenticated users to obtain sensitive information, including API keys, by exploiting certain API methods. Specifically, the "update repo", "get locks", and "get user group...