Privilege Escalation Vulnerability in Galette Membership Management Application
CVE-2025-58053

4.9MEDIUM

Key Information:

Vendor

Galette

Status
Galette
Vendor
CVE Published:
19 December 2025

What is CVE-2025-58053?

Galette, an application designed for managing memberships in non-profit organizations, is vulnerable to a privilege escalation flaw. An unauthenticated attacker can exploit this vulnerability by issuing a crafted POST request that allows them to gain elevated privileges on existing user accounts. This issue has been addressed in version 1.2.0, urging users to update to this version to mitigate potential risks. For more information, visit the official security advisory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

galette < 1.2.0

References

https://github.com/galette/galette/security/advisories/GH...
x_refsource_CONFIRM

CVSS V4

Score:
4.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.