Description
Galette is a membership management web application for non profit organizations. Prior to version 1.2.0, while updating any existing account with a self forged POST request, one can gain higher privileges. Version 1.2.0 fixes the issue.
Related CPE's
Could not find any relations
CVSS impact metrics
Missing metrics for CVSS V
CVSS V3.1
CVSS V3.0
CVSS V2.0
Information
Source identifier
Vulnerability status
Undergoing analysis
Published
2025-12-19T17:15:52.440
3 hours agoLast modified
2025-12-19T18:00:18.330
3 hours ago