CVEvulnerability

CVE-2025-58352

2.1 LOW Published 2025-09-05 Modified 2026-09-30 Official page ↗

Status: Analyzed
Published: 2025-09-05
Last modified: 2026-09-30
Assigner: [email protected]
CVSS 4.0 ([email protected]): 2.1 LOW — CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected]): 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Weaknesses: CWE-613

Description

Weblate is a web based localization tool. Versions lower than 5.13.1 contain a vulnerability that causes long session expiry during the second factor verification. The long session expiry could be used to circumvent rate limiting of the second factor. This issue is fixed in version 5.13.1.

Affected configurations

• weblate weblate (< 5.13.1)

Weakness · not in database (1)

CWE-613

References

https://github.com/WeblateOrg/weblate/commit/0b46fe596231dd456283ead66699ae5516f23908 Patch
https://github.com/WeblateOrg/weblate/pull/16002 Issue Tracking
https://github.com/WeblateOrg/weblate/security/advisories/GHSA-377j-wj38-4728 Vendor Advisory

CVE-2025-58352

Description

Affected configurations

Related

Weakness · not in database (1)

References