Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RhodeCode 信息泄露漏洞
Vulnerability Description
RhodeCode是一套开源的代码库浏览和管理工具，它内嵌 push/pull 服务器、支持LDAP/AD以及权限系统。 RhodeCode 2.2.6及之前版本中存在安全漏洞。远程攻击者可借助update_repo、get_locks或get_user_groups API方法利用该漏洞获取敏感信息（API密钥等）。
CVSS Information
N/A
Vulnerability Type
N/A