CVE-2025-53922 - Galette has access control bypass

CVE ID : CVE-2025-53922 Published : Dec. 19, 2025, 3:10 p.m. | 1 hour, 10 minutes ago Description : Galette is a membership management web application for non profit organizations. Starting in version 1.1.4 and prior to version 1.2.0, a user who is logged in as group manager may bypass intended restrictions on Contributions and Transactions. Version 1.2.0 fixes the issue. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor