Privilege Escalation Vulnerability in Galette Membership Management Application

CVE-2025-58053

What is CVE-2025-58053?

Galette, an application designed for managing memberships in non-profit organizations, is vulnerable to a privilege escalation flaw. An unauthenticated attacker can exploit this vulnerability by issuing a crafted POST request that allows them to gain elevated privileges on existing user accounts. This issue has been addressed in version 1.2.0, urging users to update to this version to mitigate potential risks. For more information, visit the official security advisory.

References