Skip to content
OpenAdvisories

Package · Ubuntu

galette

10 known vulnerabilities.

2 results · Clear filters · Feed

  • Low 2.1

    Galette has groups managers access control bypass on Members

    Galette is a membership management web application for non profit organizations. Starting in version 0.9.6 and prior to version 1.2.0, attackers with group manager role can bypass intended restrictions allowing unauthorized access and changes despite role-bas…

  • Low 1.3

    Galette has access control bypass

    Galette is a membership management web application for non profit organizations. Starting in version 1.1.4 and prior to version 1.2.0, a user who is logged in as group manager may bypass intended restrictions on Contributions and Transactions. Version 1.2.0 f…