CVE-2025-47951 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Weblate is a web based localization tool. Prior to version 5.12, the verification of the second factor was not subject to rate limiting. The absence of rate lim…
Medium CVSS: 4.9

CVE-2025-47951

Weblate is a web based localization tool. Prior to version 5.12, the verification of the second factor was not subject to rate limiting. The absence of rate limiting on the second factor endpoint allows an attacker with valid credentials to automate OTP guessing. This issue has been patched in version 5.12.
Vendor
Weblate
Product
Weblate
CWE
CWE-307
Yayın Tarihi
2025-06-16 21:15:24
Güncelleme
2025-07-16 14:32:59
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-307 Weblate MEDIUM Weblate 2025

Referanslar

https://github.com/WeblateOrg/weblate/commit/f806293451248c5d95e45b3b507e9d158bc4f384 https://github.com/WeblateOrg/weblate/pull/14918 https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.12.1 https://github.com/WeblateOrg/weblate/security/advisories/GHSA-57jg-m997-cx3q https://hackerone.com/reports/3150564