CVE-2015-0260

Advisory

RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://nvd.nist.gov/vuln/detail/CVE-2015-0260
• https://kallithea-scm.org/security/cve-2015-0260.html
• http://www.securityfocus.com/bid/72573
• http://seclists.org/oss-sec/2015/q1/505
• https://rhodecode.com/blog/rhodecode-enterprise-security-release/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100888
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0260