CVE-2026-34393: Weblate: hatalı yetki yönetimi

Açıklama (NVD)

Weblate is a web based localization tool. In versions prior to 5.17, the user patching API endpoint didn't properly limit the scope of edits. This issue has been fixed in version 5.17.

Özet bilgiler

Ürün

Weblate Weblate

CVSS v3.1

8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,39 (yüzdelik 33)

CWE

CWE-269

Yama

Mevcut

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• github.com
• github.com
• CWE-269