CVE-2025-61587

Name of the Vulnerable Software and Affected Versions Weblate versions 5.13.2 and below

Description Weblate is a web-based localization tool. An open redirect exists via the redir parameter on the '.within.website' endpoint when Weblate is configured with Anubis and REDIRECT DOMAINS is not set. An attacker can create a URL on the legitimate domain that redirects a victim to an attacker-controlled site. This redirect could also initiate drive-by downloads, posing a risk to end users.

Recommendations Update to version 5.13.3 or later.