Описание
wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.2, the multi-translation download could write to an arbitrary location when instructed by a crafted server. This vulnerability is fixed in 1.17.2.
Ссылки
- Patch
- Issue TrackingPatch
- ProductRelease Notes
- PatchVendor AdvisoryMitigation
Уязвимые конфигурации
Конфигурация 1Версия до 1.17.2 (исключая)
cpe:2.3:a:weblate:wlc:*:*:*:*:*:*:*:*
EPSS
Процентиль: 3%
0.00014
Низкий
8 High
CVSS3
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 8
ubuntu
3 месяца назад
wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.2, the multi-translation download could write to an arbitrary location when instructed by a crafted server. This vulnerability is fixed in 1.17.2.
CVSS3: 8
debian
3 месяца назад
wlc is a Weblate command-line client using Weblate's REST API. Prior t ...
CVSS3: 8
github
3 месяца назад
Weblate wlc path traversal vulnerability: Unsanitized API slugs in download command
EPSS
Процентиль: 3%
0.00014
Низкий
8 High
CVSS3
Дефекты
CWE-22