CVE-2025-58053

Publication date

2025-12-19 16:26:00

Family

GitHub_M

State

PUBLISHED

Description

Galette is a membership management web application for non profit organizations. Prior to version 1.2.0, while updating any existing account with a self forged POST request, one can gain higher privileges. Version 1.2.0 fixes the issue.