CVE-2025-67492 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to trigger repository updates for many repositories via a crafted webhook p…
Medium CVSS: 5.3

CVE-2025-67492

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to trigger repository updates for many repositories via a crafted webhook payload. Version 5.15 fixes the issue. As a workaround, disabling webhooks completely using ENABLE_HOOKS avoids this vulnerability.
Vendor
Weblate
Product
Weblate
CWE
CWE-1286
Yayın Tarihi
2025-12-16 01:15:51
Güncelleme
2025-12-17 16:03:45
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-1286 Weblate MEDIUM Weblate 2025

Referanslar

https://github.com/WeblateOrg/weblate/pull/17221 https://github.com/WeblateOrg/weblate/security/advisories/GHSA-pj86-258h-qrvf