Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 22:46:21 +0000 CVE-2024-39303 — Weblate vulnerabler to improper sanitization of project backups https://cve.radiocsirt.org/vuln/cve-2024-39303 <p><strong>Affected:</strong> WeblateOrg weblate</p> <p>Weblate is a web based localization tool. Prior to version 5.6.2, Weblate didn&#39;t correctly validate filenames when restoring project backup. It may be possible to gain unauthorized access to files on the server using a crafted ZIP file. This issue has been addressed in Weblate 5.6.2. As a workaround, do not allow untrusted users to create projects.</p> <p><strong>Affected:</strong> WeblateOrg weblate</p> <p>Weblate is a web based localization tool. Prior to version 5.6.2, Weblate didn&#39;t correctly validate filenames when restoring project backup. It may be possible to gain unauthorized access to files on the server using a crafted ZIP file. This issue has been addressed in Weblate 5.6.2. As a workaround, do not allow untrusted users to create projects.</p> https://cve.radiocsirt.org/vuln/cve-2024-39303