tolgee

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

tolgee records in CISA KEV

No tolgee vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tolgee 6 records HIGH

Records

6 records in Tolgee · all components

TI-2026-24780 CVE-2026-32251

Tolgee has an XXE Injection in Translation Import

HIGH 79

Tolgee is an open-source localization platform.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00457 Published 2026-03-12 Fixed in 3.166.3 CWE-611

TI-2023-21916 CVE-2023-41316

HTML Injection with email in Tolgee

MEDIUM 58

Tolgee is an open-source localization platform.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.0048 Published 2023-09-07 Fixed in 3.29.2 CWE-20

TI-2024-34972 CVE-2024-52297

Tolgee's configuration all configuration properties leaked in public configuration DTO

MEDIUM 50

Tolgee is an open-source localization platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00601 Published 2024-11-12 Fixed in 3.81.2 CWE-200

TI-2023-19890 CVE-2023-38510

Tolgee Lacks Permission Check for API Key for some endpoints

LOW 38

Tolgee is an open-source localization platform.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00605 Published 2023-07-27 Fixed in 3.23.1 CWE-862

TI-2024-21365 CVE-2024-32470

Tolgee' API keys created by server admin users bypass the permission check

LOW 30

Tolgee is an open-source localization platform.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00556 Published 2024-04-18 Fixed in 3.57.4 CWE-863

TI-2024-21361 CVE-2024-32466

Tolgee's API key scopes not checked when querying translation data

LOW 20

Tolgee is an open-source localization platform.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0036 Published 2024-04-18 Fixed in 3.57.2 CWE-862

Open these records in search →