Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2025-67715

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to retrieve user notification settings or list all users via API. Version 5.15 fixes the issue.

VectorNETWORK

PublishedDec 16, 2025, 01:15

Published Bysecurity-advisories@github.com

Base Score

Score4.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

Weblate(PyPI)05.15N/A

References

https://github.com/WeblateOrg/weblate/pull/17256
https://github.com/WeblateOrg/weblate/security/advisories/GHSA-3pmh-24wp-xpf4

Weakness Type

CWE-284

CVSS Metrics

Base Score

4.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK