rhodecode vulnerabilities

Products

• rhodecode enterprise 2

Latest rhodecode CVEs

Newest publication first

1. CVE-2015-1613 RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method.

   Published 2015-02-16

   Medium·CVSS 4.0 EPSS 1.3%

   RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method.

2. CVE-2015-0260 RhodeCode and Kallithea are vulnerable to sensitive information disclosure

   Published 2015-02-16

   Medium·CVSS 4.0 EPSS 1.9%

   RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.