weblate vulnerabilities (openSUSE)
15 vulnerabilities.
-
weblateopenSUSE Weblate SSRF: outbound URL guard misses the NAT64 well-known prefix (64:ff9b::/96) 5.9 Medium -
weblateopenSUSE Weblate: Stored HTML injection in editor search preview 4.6 Medium -
weblateopenSUSE Weblate is vulnerable to XSS via crafted Markdown 4.3 Medium -
weblateopenSUSE Weblate: Private Translation Enumeration via Screenshot API 4.3 Medium -
weblateopenSUSE Weblate is Vulnerable to Authenticated SSRF via Project Backup Import bypassing validate_repo_url 5.3 Medium -
weblateopenSUSE Weblate's API Token Not Invalidated on Password Change 4.2 Medium -
weblateopenSUSE Weblate: Missing access control for the AddonViewSet API exposes all addon configurations 4.3 Medium -
weblateopenSUSE Weblate leaks information via screenshots 2.3 Low -
weblateopenSUSE Weblate has git config file overwrite vulnerability that leads to remote code execution 9.1 Critical -
weblateopenSUSE Weblate leaks the IP of project members inviting users to assume reviewer roles in Audit log 2.6 Low -
weblateopenSUSE Weblate integration with Anubis can lead to Open Redirect via redir parameter 2.1 Low -
weblateopenSUSE Weblate VCS credentials included in URL parameters are potentially logged and saved into browser history as plaintext 2.2 Low -
weblateopenSUSE Weblate vulnerabler to improper sanitization of project backups 4.4 Medium -
weblateopenSUSE Cross-site Scripting in Weblate 5.4 Medium -
weblateopenSUSE XSS in Bleach when noscript and raw tag whitelisted 6.1 Medium