VULNERABILITY INTELLIGENCE

CVE-2025-58352

CVSS score6.5 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2025-09-05
Last modified2026-09-30
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Description

Weblate is a web based localization tool. Versions lower than 5.13.1 contain a vulnerability that causes long session expiry during the second factor verification. The long session expiry could be used to circumvent rate limiting of the second factor. This issue is fixed in version 5.13.1.

Weakness classification

  • security-advisories@github.com: CWE-613

Primary references