Weblate IP Address Leak Vulnerability in Audit Log

A vulnerability in Weblate prior to version 5.14.1 allows for the unintentional disclosure of IP addresses belonging to project members who invite users to join the project. This information is recorded in the audit log, which can be accessed by the invited users. The issue arises because the audit log includes IP addresses from actions initiated by administrators, creating a potential privacy concern.

Impact

This vulnerability could lead to a privacy breach by exposing the IP address of an admin to invited users.

Remediation

Users can update to Weblate version 5.14.1 to address this vulnerability.