Weblate Detection (HTTP)

HTTP based detection of Weblate. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.106667";...

Weblate < 2.10.1 Information Disclosure Vulnerability

Weblate is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:weblate:weblate"; if...

Design/Logic Flaw

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

CVE-2017-5537

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

PYSEC-2017-42

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

PYSEC-2017-42

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

CVE-2017-5537

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

CVE-2017-5537

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

CVE-2017-5537

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

CVE-2017-5537

CVE-2017-5537 affects Weblate prior to 2.10.1, where the password reset form returns different error messages based on whether the provided email is linked to an account. This behavior enables remote user enumeration via multiple requests. Public reports across multiple sources (SÚSE, OSV, GHSA a...

PT-2017-16566

Name of the Vulnerable Software and Affected Versions Weblate versions prior to 2.10.1 Description The issue concerns the password reset form, which provides different error messages based on whether an email address is associated with an account. This allows remote attackers to enumerate user...

CVE-2017-5537: Exposure of Sensitive Information to an Unauthorized Actor

The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user accounts via a series of requests...

WS-2017-3792

In weblate in versions weblate-2.12 to weblate-2.13 is vulnerable to XSS...

WS-2017-3793

In weblate in versions weblate-2.10 to weblate-2.13 is vulnerable to CSV Injection with the CSV export feature...

Weblate Information Disclosure Vulnerability

Weblate is a free web-based translation management system. It can be tightly integrated with version control. It features a clean and simple user interface, translation synchronization between components, quality checking and automatic linking to source files. Weblate suffers from an information...

Information Disclosure In Password Reset Form

weblate is vulnerable to information disclosure in its password reset form. When entering an arbitrary email address in the password reset form, it will report back "User with this email address was not found", allowing to figure out which user accounts exist on the weblate instance...