Weblate has Systematic User and Project Enumeration via Broken Authorization in REST API (IDOR)

概要

参考情報

• WeblateOrg/weblate security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2025-67715 · ADVISORY
• WeblateOrg/weblate#17256 · WEB
• WeblateOrg/weblate · PACKAGE
• pypa/advisory-database · WEB

weblate のその他の脆弱性

• CVE-2026-55228高 8.1Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, the REST API did …
• CVE-2026-55227中 4.3Weblate is a web-based localization tool. In versions prior to 2026.7, several endpoints look up objects in a globally scoped manner rather …
• CVE-2026-50127中 5.9Weblate is a web based localization tool. From version 5.15 to before version 2026.6, Weblate's VCS_RESTRICT_PRIVATE did not properly accoun…
• CVE-2026-45106中 4.6Weblate is a web based localization tool. Prior to version 2026.5, Weblate's live search preview renders unit source and context as HTML wit…
• CVE-2026-44264中 4.3Weblate is a web based localization tool. Prior to version 5.17.1, the Markdown renderer used in user comments and other user-provided conte…