Описание
Weblate is a web based localization tool. In versions prior to 5.17, the webhook add-on did not utilize existing SSRF protections. This issue has been fixed in version 5.17. If developers are unable to update immediately, they can disable the webhook add-on as a workaround.
Ссылки
- Issue TrackingPatch
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 5.17 (исключая)
cpe:2.3:a:weblate:weblate:*:*:*:*:*:*:*:*
EPSS
Процентиль: 20%
0.00275
Низкий
4.1 Medium
CVSS3
Дефекты
CWE-918
Связанные уязвимости
CVSS3: 4.1
debian
4 месяца назад
Weblate is a web based localization tool. In versions prior to 5.17, t ...
CVSS3: 4.1
github
4 месяца назад
Weblate: SSRF via the webhook add-on using unprotected fetch_url()
EPSS
Процентиль: 20%
0.00275
Низкий
4.1 Medium
CVSS3
Дефекты
CWE-918