EUVD-2017-0140

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Password reset form in Weblate before version 2.10.1 allows account enumeration via error messages.

Reporter	Title	Published	Views	Family All 12
CNVD	Weblate Information Disclosure Vulnerability	25 Jan 201700:00	–	cnvd
CVE	CVE-2017-5537	15 Mar 201715:00	–	cve
Cvelist	CVE-2017-5537	15 Mar 201715:00	–	cvelist
Github Security Blog	Weblate user account enumeration via reset password form	17 May 202202:54	–	github
NVD	CVE-2017-5537	15 Mar 201715:59	–	nvd
OpenVAS	Weblate < 2.10.1 Information Disclosure Vulnerability	17 Mar 201700:00	–	openvas
OSV	GHSA-J24G-GM76-J829 Weblate user account enumeration via reset password form	17 May 202202:54	–	osv
OSV	PYSEC-2017-42	15 Mar 201715:59	–	osv
Prion	Design/Logic Flaw	15 Mar 201715:59	–	prion
PyPA	PYSEC-2017-42	15 Mar 201715:59	–	pypa

[
  {
    "enisaIdVendor": [
      {
        "id": "6b220283-e61a-3c84-ba2a-e10b25b6993d",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "cdc97004-1341-34f5-94fc-020cd5dcc33a",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
github	www.github.com/WeblateOrg/weblate/issues/1317
github	www.github.com/WeblateOrg/weblate/commit/abe0d2a29a1d8e896bfe829c8461bf8b391f1079
github	www.github.com/WeblateOrg/weblate/blob/weblate-2.10.1/docs/changes.rst
securityfocus	www.securityfocus.com/bid/95676
openwall	www.openwall.com/lists/oss-security/2017/01/20/1
openwall	www.openwall.com/lists/oss-security/2017/01/18/11
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-5537
github	www.github.com/pypa/advisory-database/tree/main/vulns/weblate/PYSEC-2017-42.yaml
suse	www.suse.com/security/cve/CVE-2017-5537.html
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

5.3Medium risk

Vulners AI Score5.3

CVSS 35.3

CVSS 25

EPSS0.00543