Weblate Improper Access Control Vulnerability in Translation Memory API

A vulnerability exists in Weblate versions prior to 5.17, where the translation memory API unintentionally exposed endpoints without proper access control. This flaw could allow unauthorized access to translation memory data. The issue has been addressed in version 5.17. For users unable to update immediately, a workaround is available by blocking access to the '/api/memory/' endpoint on the HTTP server.

Impact

The vulnerability could lead to unauthorized access to translation memory data via the API.

Remediation

Users can update to Weblate version 5.17 to address this vulnerability. If an immediate update is not possible, access to the '/api/memory/' endpoint can be blocked on the HTTP server to remove this feature.