Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2026/05/26 4:41 p.m.•29 views

Weblate has a Server-Side Request Forgery issue

Impact The Create Component functionality in Weblate allows authorized users to add new translation components by specifying both a version control system and a source code repository URL to pull from. However, the repository URL field is not validated or sanitized, allowing an attacker to supply...

5CVSS5.9AI score0.0024EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
•added 2026/05/26 4:41 p.m.•21 views

EUVD-2025-203462

Weblate has a Server-Side Request Forgery issue...

5CVSS5.8AI score0.0024EPSS
SaveExploits0References5
Snyk
Snyk
•added 2026/05/26 4:41 p.m.•11 views

Server-side Request Forgery (SSRF)

Overview weblate is an A web-based continuous localization system with tight version control integration Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the Create Component process. An attacker can access internal network resources and enumerate local fil...

5.3CVSS5.9AI score0.0024EPSS
SaveExploits0References3
OSV
OSV
•added 2025/12/16 12:16 a.m.•17 views

PYSEC-2025-231

Weblate is a web based localization tool. The Create Component functionality in Weblate allows authorized users to add new translation components by specifying both a version control system and a source code repository URL to pull from. However, prior to version 5.15, the repository URL field is...

5CVSS5.9AI score0.0024EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/12/15 11:36 p.m.•47 views

CVE-2025-66407 Weblate has Server-Side Request Forgery vulnerability

Weblate is a web based localization tool. The Create Component functionality in Weblate allows authorized users to add new translation components by specifying both a version control system and a source code repository URL to pull from. However, prior to version 5.15, the repository URL field is...

5CVSS0.0024EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/15 11:36 p.m.•7 views

CVE-2025-66407 Weblate has Server-Side Request Forgery vulnerability

Weblate is a web based localization tool. The Create Component functionality in Weblate allows authorized users to add new translation components by specifying both a version control system and a source code repository URL to pull from. However, prior to version 5.15, the repository URL field is...

5CVSS6.1AI score0.0024EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/12/15 12:00 a.m.•26 views

PT-2025-51337

Name of the Vulnerable Software and Affected Versions Weblate versions prior to 5.15 Description Weblate is a web-based localization tool. The Create Component functionality allows authorized users to add new translation components by specifying a version control system and a source code reposito...

5CVSS6.3AI score0.0024EPSS
SaveExploits0References12
Rows per page
Query Builder