Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/16 8:41 p.m.11 views

Weblate: Authenticated SSRF via redirect bypass of ALLOWED_ASSET_DOMAINS in screenshot URL uploads

Impact The ALLOWEDASSETDOMAINS setting applied only to the first issued requests and didn't restrict possible redirects. Patches https://github.com/WeblateOrg/weblate/pull/18550 References This issue was reported by @spbavarva via GitHub...

5CVSS5.8AI score0.0024EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder