Описание
Weblate: Privilege escalation in the user API endpoint
Impact
The user patching API endpoint didn't properly limit the scope of edits.
Patches
References
Thanks to @tikket1 and @DavidCarliez for reporting this via GitHub. We received two individual reports for this.
Пакеты
Наименование
Weblate
pip
Затронутые версииВерсия исправления
< 5.17
5.17
Связанные уязвимости
CVSS3: 8.8
nvd
4 месяца назад
Weblate is a web based localization tool. In versions prior to 5.17, the user patching API endpoint didn't properly limit the scope of edits. This issue has been fixed in version 5.17.
CVSS3: 8.8
debian
4 месяца назад
Weblate is a web based localization tool. In versions prior to 5.17, t ...