Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: galette Component: Galette Clear all filters
TI-2025-33787 CVE-2025-53922

Galette has access control bypass

Priority LOW 8

Galette is a membership management web application for non profit organizations.

CVSS 4.0LOW 1.3 Network Low privileges No interaction EPSS 0.0024 Published 2025-12-19 Fixed in 1.2.0 CWE-863
TI-2025-30447 CVE-2025-48076

Galette is vulnerable to Cross-site Scripting

Priority LOW 23

Galette is a membership management web application for non profit organizations.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00179 Published 2025-11-04 Fixed in 1.2.0 CWE-87
TI-2021-18093 CVE-2021-41261

Stored Cross-site Scripting in Galette

Priority LOW 36

Galette is a membership management web application built for non profit organizations and released under GPLv3.

CVSS 3.1HIGH 8.1 Network High privileges User interaction EPSS 0.0061 Published 2021-12-16 Fixed in 0.9.6 CWE-79
TI-2021-18094 CVE-2021-41262

SQL Injection in Galette

Priority MEDIUM 40

Galette is a membership management web application built for non profit organizations and released under GPLv3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01086 Published 2021-12-16 Fixed in 0.9.6 CWE-89
TI-2021-18092 CVE-2021-41260

Missing CSRF checks in Galette

Priority LOW 38

Galette is a membership management web application built for non profit organizations and released under GPLv3.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00448 Published 2021-12-16 Fixed in 0.9.6 CWE-352
TI-2021-04419 CVE-2021-21319

Several stored XSS

Priority LOW 32

Galette is a membership management web application geared towards non profit organizations.

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00886 Published 2021-10-25 Fixed in 0.9.5 CWE-79