Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-23535

Опубликовано: 16 янв. 2026
Источник: nvd
CVSS3: 8
EPSS Низкий

Описание

wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.2, the multi-translation download could write to an arbitrary location when instructed by a crafted server. This vulnerability is fixed in 1.17.2.

EPSS

Процентиль: 9%
0.00033
Низкий

8 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 8
ubuntu
22 дня назад

wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.2, the multi-translation download could write to an arbitrary location when instructed by a crafted server. This vulnerability is fixed in 1.17.2.

CVSS3: 8
debian
22 дня назад

wlc is a Weblate command-line client using Weblate's REST API. Prior t ...

CVSS3: 8
github
22 дня назад

Weblate wlc path traversal vulnerability: Unsanitized API slugs in download command

EPSS

Процентиль: 9%
0.00033
Низкий

8 High

CVSS3

Дефекты

CWE-22