Skip to content
CVE PROGRAM SOURCE RECORD1.3 Low

CVE-2025-53922

Galette has access control bypass

Description

Galette is a membership management web application for non profit organizations. Starting in version 1.1.4 and prior to version 1.2.0, a user who is logged in as group manager may bypass intended restrictions on Contributions and Transactions. Version 1.2.0 fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

galette galette

  • >= 1.1.4, < 1.2.0affected

References