CyberSecBulletin

Weblate vulnerabilities

We track 1 vulnerability in Weblate products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 4, 2022.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Weblate vulnerabilities

  • 8.8 High severity

    Weblate: Improper Neutralization of Argument Delimiters in a Command

    CVE-2022-23915WeblateEPSS 3.1%

    The package weblate from 0 and before 4.11.1 are vulnerable to Remote Code Execution (RCE) via argument injection when using git or mercurial repositories. Authenticated users, can change the behavior of the application in an unintended way, leading to command