VDB

CVE-2024-39303

CVE-2024-39303 PUBLISHED CVSS 4.400000095367432 MEDIUM

Weblate vulnerable to improper sanitization of project backups

EPSS 0.32% · 24.2th percentile

Risk Scores

CVSS 3.1
4.400000095367432
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N
EPSS Score
0.32%
24.2th percentile

Affected Products

VendorProductVersions
WeblateOrgweblate>= 4.14, < 5.6.2, >= 4.14, < 5.6.2
PyPIWeblate4.14, 4.14
weblateweblate4.14, 4.14

Timeline

  • Jan 21, 1970 Security Advisory
  • Jul 1, 2024 CVE Published
  • Jul 2, 2024 EPSS Score
  • Jul 24, 2024 EPSS Score
  • Aug 16, 2024 EPSS Score
  • Sep 7, 2024 EPSS Score
  • Sep 30, 2024 EPSS Score
  • Oct 4, 2024 Coalition ESS Score
  • Oct 22, 2024 EPSS Score
  • Nov 13, 2024 EPSS Score
  • Nov 18, 2024 CVE Updated
  • Dec 7, 2024 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›