Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-53922

Опубликовано: 19 дек. 2025
Источник: nvd
CVSS3: 4.9
EPSS Низкий

Описание

Galette is a membership management web application for non profit organizations. Starting in version 1.1.4 and prior to version 1.2.0, a user who is logged in as group manager may bypass intended restrictions on Contributions and Transactions. Version 1.2.0 fixes the issue.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:galette:galette:*:*:*:*:*:*:*:*
Версия от 1.1.4 (включая) до 1.2.0 (исключая)

EPSS

Процентиль: 9%
0.00033
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 4.9
ubuntu
около 2 месяцев назад

Galette is a membership management web application for non profit organizations. Starting in version 1.1.4 and prior to version 1.2.0, a user who is logged in as group manager may bypass intended restrictions on Contributions and Transactions. Version 1.2.0 fixes the issue.

CVSS3: 4.9
debian
около 2 месяцев назад

Galette is a membership management web application for non profit orga ...

EPSS

Процентиль: 9%
0.00033
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-863