id: weblate-public-project-exposure

info:
  name: Weblate Public Project - Exposure
  author: ritikchaddha
  severity: info
  description: |
    Weblate instance is publicly accessible. Public exposure of Weblate may lead to unauthorized access to translation projects, potential data leaks, credential exposure, or manipulation of open source localization data. Attackers can view available projects and access sensitive information if proper access controls are not implemented.
  reference:
    - https://docs.weblate.org/en/latest/admin/security.html
    - https://github.com/WeblateOrg/weblate
  metadata:
    max-request: 1
    verified: true
    fofa-query: 'title="Weblate"'
    shodan-query: 'http.title:"Weblate"'
  tags: misconfig,exposure,weblate,public

http:
  - method: GET
    path:
      - "{{BaseURL}}/projects/"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Weblate"
          - "Untranslated"
          - "Browse all projects"
        condition: and

      - type: word
        part: content_type
        words:
          - "text/html"

      - type: status
        status:
          - 200
# digest: 4a0a00473045022100e74da0a544cd32e7aa5e36a1f0b986727cc3eaf50f2723c6293c609e337cadc402203dbef97c8c3c9338c14892c1fdb4779e315981b6c64a652b179a4d2ba2e40737:922c64590222798bb761d5b6d8e72950