CVE-2026-39845 - CERT CVE
ID CVE-2026-39845
Sažetak Weblate is a web based localization tool. In versions prior to 5.17, the webhook add-on did not utilize existing SSRF protections. This issue has been fixed in version 5.17. If developers are unable to update immediately, they can disable the webhook add-on as a workaround.
Reference
CVSS
Base: 4.1
Impact: 1.4
Exploitability:2.3
Pristup
VektorSloženostAutentikacija
NETWORK LOW HIGH
Impact
PovjerljivostCjelovitostDostupnost
LOW NONE NONE
CVSS vektor CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
Zadnje važnije ažuriranje 21-04-2026 - 14:05
Objavljeno 15-04-2026 - 19:16