tocsin

CVE-2015-1613

1 advisory.

PyPI/rhodecode CVE-2015-1613: unknown

RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method.

Action: Upgrade rhodecode to 2.2.7 or later.

pip install rhodecode==2.2.7

Affected

introducedfixedlast affected
02.2.7-

Fixed versions

2.2.7

Sources

CVE-2015-1613 · published · modified · JSON