Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-52297

Tolgee's configuration all configuration properties leaked in public configuration DTO

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

Tolgee is an open-source localization platform. Tolgee 3.81.1 included the all configuration properties in the PublicConfiguratioDTO publicly exposed to users. This vulnerability is fixed in v3.81.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

tolgee tolgee-platform

  • >= 3.81.1, < 3.81.2affected

References