Description

Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to read arbitrary files from the server file system using crafted symbolic links in the repository. Version 5.15.1 fixes the issue.

Related CPE's

Could not find any relations

References

https://github.com/WeblateOrg/weblate/pull/17331

https://github.com/WeblateOrg/weblate/pull/17356

https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.15.1

https://github.com/WeblateOrg/weblate/security/advisories/GHSA-g925-f788-4jh7

Weaknesses

[email protected]

Primary
CWE-22CWE-59CWE-200

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

7.7 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Undergoing analysis

Published

2025-12-18T23:15:48.863

21 hours ago

Last modified

2025-12-19T18:00:18.330

3 hours ago