CVE-2025-58053

Critical

Published: 19/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Galette is a membership management web application for non-profit organizations. Prior to version 1.2.0, while updating any existing account with a self-forged POST request, one can gain higher privileges. Version 1.2.0 fixes the issue.

Risk Assessment

Risk of privilege escalation, potentially allowing an attacker to gain administrative access and compromise organizational data.

Recommendation

Update Galette to version 1.2.0 or later and monitor account activity for unusual requests.

Original NVD description (English source)

Galette is a membership management web application for non profit organizations. Prior to version 1.2.0, while updating any existing account with a self forged POST request, one can gain higher privileges. Version 1.2.0 fixes the issue.