CVE-2024-24761CWE-863

Galette public pages accessibility restriction

High · published March 6, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
48.7
In the wild
Unconfirmed
What it is

Galette is a membership management web application for non profit organizations. Starting in version 1.0.0 and prior to version 1.0.2, public pages are per default restricted to only administrators and staff members. From configuration, it is possible to restrict to up-to-date members or to everyone. Version 1.0.2 fixes this issue.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00614 · 48.7th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2024-03-06T17:25Z
EPSS history
Timeline
  • 06 MAR 17:25Z
    Galette public pages accessibility restriction
    cvelistv5