3 matches found
Weblate: Missing access control for the AddonViewSet API exposes all addon configurations
Impact Users were able to obtain add-on configuration via API. Patches https://github.com/WeblateOrg/weblate/pull/18107 https://github.com/WeblateOrg/weblate/pull/18164 References Weblate thanks @lighthousekeeper1212 for responsible disclosure...
4.3CVSS5.3AI score0.00303EPSS
SaveExploits0References8Affected Software1
GHSA-WPPC-7CQ7-CGFV Weblate: Missing access control for the AddonViewSet API exposes all addon configurations
Impact Users were able to obtain add-on configuration via API. Patches https://github.com/WeblateOrg/weblate/pull/18107 https://github.com/WeblateOrg/weblate/pull/18164 References Weblate thanks @lighthousekeeper1212 for responsible disclosure...
4.3CVSS5.4AI score0.00303EPSS
SaveExploits0References8
20