~ / search / GHSA-hhx9-4vw2-x54r

GHSA-hhx9-4vw2-x54r

RhodeCode and Kallithea are vulnerable to sensitive information disclosure

Source: GitHub Advisory Database (reviewed) High CVE-2015-0260

Packages

EcosystemPackageAffectedFixed in
PyPI RhodeCode < 2.2.7 2.2.7
PyPI Kallithea < 0.2 0.2

Details

As written in the advisory (Markdown source, shown as plain text).

RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method.

References

External links from the advisory. They lead to third-party sites.