Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-52297 EUVD-2024-45835

Tolgee's configuration all configuration properties leaked in public configuration DTO

Published Nov 12, 2024 · Updated Nov 12, 2024 · Assigned by GitHub_M

Description

Tolgee is an open-source localization platform. Tolgee 3.81.1 included the all configuration properties in the PublicConfiguratioDTO publicly exposed to users. This vulnerability is fixed in v3.81.2.

Affected products

VendorProductAffectedFixed
tolgee tolgee-platform >= 3.81.1, < 3.81.2 —

References