Описание
Weblate is a web based localization tool. In versions prior to 5.17, the translation memory API exposed unintended endpoints, which in turn didn't enforce proper access control. This issue has been fixed in version 5.17. If users are unable to update immediately, they can work around this issue by blocking access to /api/memory/ in the HTTP server, which removes access to this feature.
Ссылки
- Issue TrackingPatch
- MitigationPatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 5.17 (исключая)
cpe:2.3:a:weblate:weblate:*:*:*:*:*:*:*:*
EPSS
Процентиль: 15%
0.00236
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-862
Связанные уязвимости
CVSS3: 4.3
debian
4 месяца назад
Weblate is a web based localization tool. In versions prior to 5.17, t ...
CVSS3: 4.3
github
4 месяца назад
Weblate: Improper access control for the translation memory in API
EPSS
Процентиль: 15%
0.00236
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-862