PT-2025-52374 · Weblate · Weblate
CVSS v3.1
7.7
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Weblate versions prior to 5.15.1
Description
Weblate is a web-based localization tool. Versions prior to 5.15.1 contain a flaw that allows reading arbitrary files from the server file system. This is possible through the use of specially crafted symbolic links within a repository.
Recommendations
Update to version 5.15.1 or later.
Exploit
Fix
DoS
Link Following
Information Disclosure
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Weblate