CVE-2025-68279 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to read arbitrary files from the server file system using crafted symboli…
High CVSS: 7.7

CVE-2025-68279

Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to read arbitrary files from the server file system using crafted symbolic links in the repository. Version 5.15.1 fixes the issue.
Vendor
Weblate
Product
Weblate
CWE
CWE-22
Yayın Tarihi
2025-12-18 23:15:48
Güncelleme
2026-01-02 16:33:54
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-22 Weblate HIGH Weblate 2025

Referanslar

https://github.com/WeblateOrg/weblate/pull/17331 https://github.com/WeblateOrg/weblate/pull/17356 https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.15.1 https://github.com/WeblateOrg/weblate/security/advisories/GHSA-g925-f788-4jh7