CVE-2024-32470

—

CVSS 3.1

6.5 medium

EPSS

<1%p45

Published

Apr 18, 2024 (Apr 18, 2024)

Modified

Jun 17, 2026

Description

Tolgee is an open-source localization platform. When API key created by admin user is used it bypasses the permission check at all. This error was introduced in v3.57.2 and immediately fixed in v3.57.4.

Vendors: tolgee
Products: tolgee
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.