What’s Vulnerable › Vulnerabilities

CVE-2024-24761: Galette public pages accessibility restriction

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-06 · updated 2026-06-17
• Weakness: CWE-863

Description

Galette is a membership management web application for non profit organizations. Starting in version 1.0.0 and prior to version 1.0.2, public pages are per default restricted to only administrators and staff members. From configuration, it is possible to restrict to up-to-date members or to everyone. Version 1.0.2 fixes this issue.

Affected products

• galette: 1.0.0, 1.0.1

References

• https://github.com/galette/galette/commit/a5c18bb9819b8da1b3ef58f3e79577083c657fbb
• https://github.com/galette/galette/security/advisories/GHSA-jrqg-mpwv-pxpv
• https://github.com/galette/galette/commit/a5c18bb9819b8da1b3ef58f3e79577083c657fbb
• https://github.com/galette/galette/security/advisories/GHSA-jrqg-mpwv-pxpv

Get alerted when CVE-2024-24761 or the next vulnerability affects your stack