| Package | Affected versions | Patched versions |
|---|---|---|
| weblate | < 5.13.1 | 5.13.1 |
| weblate | < 5.13.1 | 5.13.1 |
The verification of the second factor had too long a session expiry. The long session expiry could be used to circumvent rate limiting of the second factor.
This issue has been addressed in Weblate 5.13.1 via https://github.com/WeblateOrg/weblate/pull/16002.
Thanks to Nahid Hasan Limon for reporting this issue responsibly.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free