tolgee-platform vulnerabilities

2 known vulnerabilities in tolgee-platform from Tolgee. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  tolgee-platform: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-52297Nov 12, 2024Tolgee

  Tolgee is an open-source localization platform. Tolgee 3.81.1 included the all configuration properties in the PublicConfiguratioDTO publicly exposed to users. This vulnerability is fixed in v3.81.2.

• 8.1 High severity

  tolgee-platform: Missing Authorization

  CVE-2023-38510Jul 27, 2023Tolgee

  Tolgee is an open-source localization platform. Starting in version 3.14.0 and prior to version 3.23.1, when a request is made using an API key, the backend fails to verify the permission scopes associated with the key, effectively bypassing permission checks