weblate 5.15 : vulnérabilités connues · Page n° 2

Impossible de comparer 3 entrées. Les résultats sont incomplets.

1. CVE-2026-21889

   Faible · CVSS 2.3EPSS 0,39%Correctif disponible

   Weblate leaks information via screenshots

   Weblate is a web based localization tool. Prior to 5.15.2, the screenshot images were served directly by the HTTP server without proper access control. This could allow an unauthenticated user to access screenshots after guessing their filename. This vulnerability is fixed in 5.15.2.

   weblatePython

   • Mettez à jour vers 5.15.2

   Publication 14 janvier 2026Mise à jour 14 janvier 2026

   Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

2. CVE-2025-68398

   Critique · CVSS 9.1EPSS 0,79%Correctif disponible

   Weblate has git config file overwrite vulnerability that leads to remote code execution

   Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to overwrite Git configuration remotely and override some of its behavior. Version 5.15.1 fixes the issue.

   weblatePython

   • Mettez à jour vers 5.15.1

   Publication 18 décembre 2025Mise à jour 6 février 2026

   Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗

3. CVE-2025-68279

   Élevée · CVSS 7.7EPSS 0,41%Correctif disponible

   Weblate has an arbitrary file read via symbolic links

   Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to read arbitrary files from the server file system using crafted symbolic links in the repository. Version 5.15.1 fixes the issue.

   weblatePython

   • Mettez à jour vers 5.15.1

   Publication 18 décembre 2025Mise à jour 19 décembre 2025

   Avis original 1 ↗Avis original 2 ↗Avis original 3 ↗