Tolgee vulnerabilities
We track 2 vulnerabilities in Tolgee products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2024.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Tolgee vulnerabilities
- 7.5 High severity
tolgee-platform: Exposure of Sensitive Information to an Unauthorized Actor
Tolgee is an open-source localization platform. Tolgee 3.81.1 included the all configuration properties in the PublicConfiguratioDTO publicly exposed to users. This vulnerability is fixed in v3.81.2.
- 8.1 High severity
tolgee-platform: Missing Authorization
Tolgee is an open-source localization platform. Starting in version 3.14.0 and prior to version 3.23.1, when a request is made using an API key, the backend fails to verify the permission scopes associated with the key, effectively bypassing permission checks