Description (CNA)
Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WeblateOrg / weblate | affected < 5.15 |
CWE
CWE-286
References
- https://github.com/WeblateOrg/weblate/security/advisories/GHSA-m6hq-f4w9-qrjj
- https://github.com/WeblateOrg/weblate/pull/16913
- https://github.com/WeblateOrg/weblate/commit/02e904675f0608a6bbfbf9466eeccd9d022591e9
- https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.15
ADP enrichment
No English description supplied.
No references supplied.