p PatchFirst

PatchFirst · Vulnerabilidades recientes

weblate 5.15: vulnerabilidades conocidas · Página 2

La comparación de weblate 5.15 está incompleta. Revisa las coincidencias confirmadas a continuación.

RSS ↗ JSON ↗
Filtrar vulnerabilidades
Borrar filtros

No se pudieron comparar 3 registros. Los resultados están incompletos.

Vulnerabilidades: 23

  1. CVE-2026-21889

    Baja · CVSS 2.3EPSS 0,39%Corrección disponible

    Weblate leaks information via screenshots

    Weblate is a web based localization tool. Prior to 5.15.2, the screenshot images were served directly by the HTTP server without proper access control. This could allow an unauthenticated user to access screenshots after guessing their filename. This vulnerability is fixed in 5.15.2.

    weblatePython
    • Actualiza a 5.15.2
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  2. CVE-2025-68398

    Crítica · CVSS 9.1EPSS 0,79%Corrección disponible

    Weblate has git config file overwrite vulnerability that leads to remote code execution

    Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to overwrite Git configuration remotely and override some of its behavior. Version 5.15.1 fixes the issue.

    weblatePython
    • Actualiza a 5.15.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  3. CVE-2025-68279

    Alta · CVSS 7.7EPSS 0,41%Corrección disponible

    Weblate has an arbitrary file read via symbolic links

    Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to read arbitrary files from the server file system using crafted symbolic links in the repository. Version 5.15.1 fixes the issue.

    weblatePython
    • Actualiza a 5.15.1
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →