Weblate Privilege Escalation Vulnerability in User Patching API Endpoint

A privilege escalation vulnerability has been identified in Weblate, a web-based localization tool, affecting versions through 5.17. The issue arises because the user patching API endpoint did not properly restrict the scope of edits, allowing for unauthorized modifications. This vulnerability has been addressed in version 5.17.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation via the user patching API endpoint, enabling attackers to make unauthorized changes or access elevated permissions.

Remediation

Users can upgrade to Weblate version 5.17 to address this vulnerability.