Skip to content
OpenAdvisories

Vendor

tolgee

6 known vulnerabilities.

Products

tolgee-platform 6
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2023-38510

    Tolgee Lacks Permission Check for API Key for some endpoints

    Tolgee is an open-source localization platform. Starting in version 3.14.0 and prior to version 3.23.1, when a request is made using an API key, the backend fails to verify the permission scopes associated with the key, effectively bypassing permission checks…

    tolgee tolgee-platform