CVE-2025-67715: Weblate is a web based localization tool. In versions prior to 5.15, it was possible to retrieve user notification settings or list all users via API. Version…

PriorityP423medium4.3CVSS 3.1

AVNACLPRLUINSUCLINAN

EPSS

0.27%

19.8th percentile

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to retrieve user notification settings or list all users via API. Version 5.15 fixes the issue.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
weblate	weblate	< 5.15	5.15
weblate	weblate	>= 0 < 5.15	5.15
weblateorg	weblate	< 5.15	5.15

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.