Unscored CVE-2015-1613 EUVD-2015-0033GHSA-qc99-q2vr-37hjPYSEC-2015-33

RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) ge…

Published Feb 16, 2015 · Updated Sep 16, 2024 · Assigned by mitre

Description

RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
PyPI	rhodecode	< 2.2.7	2.2.7	PYSEC-2015-33

References

https://rhodecode.com/blog/rhodecode-enterprise-security-release/