Rhodecode

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Rhodecode records in CISA KEV

No Rhodecode vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Rhodecode Enterprise 2 records LOW

Records

2 records

TI-2015-00228 CVE-2015-0260 · GHSA-hhx9-4vw2-x54r

RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API…

LOW 23

RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01858 Published 2015-02-16 Fixed in 2.2.7, 0.2 CWE-200

TI-2015-01445 CVE-2015-1613 · GHSA-qc99-q2vr-37hj

RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other…

LOW 22

RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01332 Published 2015-02-16 No fix listed CWE-200

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0