Skip to content
OpenAdvisories

Vendor

tolgee

6 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 2.7

    Tolgee's API key scopes not checked when querying translation data

    Tolgee is an open-source localization platform. For the `/v2/projects/translations` and `/v2/projects/{projectId}/translations` endpoints, translation data was returned even when API key was missing `translation.view` scope. However, it was impossible to fetc…