CVE-2022-24727

 

Published at: - 04-03-2022 06:15

Last modified: - 11-03-2022 04:27

Total changes: - 3

Description

Weblate is a web based localization tool with tight version control integration. Prior to version 4.11.1, Weblate didn't properly sanitize some arguments passed to Git and Mercurial, allowing them to change their behavior in an unintended way. Instances where untrusted users cannot create new components are not affected. The issues were fixed in the 4.11.1 release.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://github.com/WeblateOrg/weblate/commit/35d59f1f040541c358cece0a8d4a63183ca919b8
• https://github.com/WeblateOrg/weblate/security/advisories/GHSA-3872-f48p-pxqj
• https://github.com/WeblateOrg/weblate/commit/d83672a3e7415da1490334e2c9431e5da1966842

 

Keywords

NVD

 

CVE-2022-24727

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures