| Package | Affected versions | Patched versions |
|---|---|---|
| rhodecode | < 2.2.7 | 2.2.7 |
| rhodecode enterprise | ≤ 2.2.6 |
RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free