1. Home
  2. CVE Database
  3. CVE-2025-67715
MEDIUM · 4.3

CVE-2025-67715

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to retrieve user notification settings or list all users via API. Version 5.15 fixes the issue.

Vulnerability Description

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to retrieve user notification settings or list all users via API. Version 5.15 fixes the issue.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
WeblateWeblate< 5.15

Related Weaknesses (CWE)

CWE-285CWE-284

References

FAQ

What is CVE-2025-67715?

CVE-2025-67715 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Weblate is a web based localization tool. In versions prior to 5.15, it was possible to retrieve user notification settings or list all users via API. Version 5.15 fixes the issue.

How severe is CVE-2025-67715?

CVE-2025-67715 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-67715?

Check the references section above for vendor advisories and patch information. Affected products include: Weblate Weblate.