Weblate Arbitrary File Read Vulnerability via Symbolic Links

A vulnerability in Weblate, a web-based localization tool, allows for arbitrary file reading from the server's file system. This issue affects Weblate versions prior to 5.15.1 and arises from crafted symbolic links in the repository that could be exploited to access unauthorized files.

Impact

Exploitation of this vulnerability could lead to unauthorized access and reading of sensitive files on the server.

Remediation

Users can upgrade to Weblate version 5.15.1, which addresses this vulnerability. The update is available on the Weblate GitHub Releases page.