Description

Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to overwrite Git configuration remotely and override some of its behavior. Version 5.15.1 fixes the issue.

Related CPE's

Could not find any relations

References

https://github.com/WeblateOrg/weblate/pull/17330

https://github.com/WeblateOrg/weblate/pull/17345

https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.15.1

https://github.com/WeblateOrg/weblate/security/advisories/GHSA-8vcg-cfxj-p5m3

Weaknesses

[email protected]

Primary
CWE-20CWE-22CWE-434

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

9.1 · Critical

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Undergoing analysis

Published

2025-12-18T23:15:49.720

21 hours ago

Last modified

2025-12-19T18:00:18.330

3 hours ago