CVE-2025-58053

CVE-2025-58053 · Galette has a privilege escalation vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Galette is a membership management web application for non profit organizations. Prior to version 1.2.0, while updating any existing account with a self forged POST request, one can gain higher privileges. Version 1.2.0 fixes the issue.

CVSS 4.9 · Medium · EPSS 0.3%

Published: 2025-12-19T16:26:00.148Z
Updated: 2025-12-19T18:00:53.263Z

Stack: system

Affected products and versions

galette
Versions
- < 1.2.0: Affected
No fix published
galette Ubuntu:16.04:LTS
Versions
- 0.8+dfsg-1
- 0.8+dfsg-1ubuntu1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published

Original sources

https://github.com/galette/galette/security/advisories/GHSA-r7x8-6r56-498r
https://nvd.nist.gov/vuln/detail/CVE-2025-58053

Check your server →

CVE-2025-58053 · Galette has a privilege escalation vulnerability

Affected products and versions

galette

galette Ubuntu:16.04:LTS

Original sources