Skip to content
OpenAdvisories

Weakness (CWE)

CWE-286: Incorrect User Management

Class Incomplete

The product does not properly manage a user within its environment.

More detail

Users can be assigned to the wrong group (class) of permissions.

Source: MITRE CWE-286

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 1.0
    CVE-2025-64725

    Weblate has improper validation upon invitation acceptance

    Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended.

    WeblateOrg weblate weblate PyPI