Описание
Weblate is a web based localization tool. In versions prior to 5.17, the ALLOWED_ASSET_DOMAINS setting applied only to the first issued requests and didn't restrict possible redirects. This issue has been fixed in version 5.17.
Уязвимые конфигурации
Конфигурация 1Версия до 5.17 (исключая)
cpe:2.3:a:weblate:weblate:*:*:*:*:*:*:*:*
EPSS
Процентиль: 15%
0.0024
Низкий
5 Medium
CVSS3
Дефекты
CWE-918
Связанные уязвимости
CVSS3: 5
debian
4 месяца назад
Weblate is a web based localization tool. In versions prior to 5.17, t ...
CVSS3: 5
github
4 месяца назад
Weblate: Authenticated SSRF via redirect bypass of ALLOWED_ASSET_DOMAINS in screenshot URL uploads
EPSS
Процентиль: 15%
0.0024
Низкий
5 Medium
CVSS3
Дефекты
CWE-918