Vendor
tolgee
6 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Low 2.7
Tolgee's API key scopes not checked when querying translation data
Tolgee is an open-source localization platform. For the `/v2/projects/translations` and `/v2/projects/{projectId}/translations` endpoints, translation data was returned even when API key was missing `translation.view` scope. However, it was impossible to fetc…