CVE-2015-0260

CVE-2015-0260 affects RhodeCode prior to 2.2.7 and Kallithea 0.1, where remote authenticated users can obtain API keys and other sensitive information via the get_repo API method. Multiple connected sources (GitHub advisory GHSA-HHX9-4VW2-X54R, Veracode entry, NVD entry, and OSV/PYSEC records) co...

CVE-2015-1613

RhodeCode up to version 2.2.6 is affected by this CVE. Remote authenticated users can obtain API keys and other sensitive information through the update_repo, get_locks, or get_user_groups API methods. Root cause is an information disclosure path in the affected API endpoints. Impact is exposure ...