Weblate has improper validation upon invitation acceptance
### Impact It was possible to accept an invitation opened by a different Weblate user. ### Patches * https://github.com/WeblateOrg/weblate/pull/16913 ### Workarounds Users should avoid leaving Weblate sessions with an unattended opened invitation. ### References Thanks to Nahid0x for responsibly disclosing this vulnerability to Weblate.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-64725US | critical9.8 | — | ||
Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workar… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/WeblateOrg/weblatePACKAGE
- https://github.com/WeblateOrg/weblate/commit/02e904675f0608a6bbfbf9466eeccd9d022591e9WEB
- https://github.com/WeblateOrg/weblate/pull/16913WEB
- https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.15WEB
- https://github.com/WeblateOrg/weblate/security/advisories/GHSA-m6hq-f4w9-qrjjWEB
- https://github.com/advisories/GHSA-m6hq-f4w9-qrjjADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2025-64725ADVISORY
- https://pypi.org/project/weblatePACKAGE
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan