galette records

10 published records for vendor galette.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 40%
Median publish → KEV: No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

10 records

CVE records
Action	CVE	Vulnerability	Severity	EPSS · Published
35Monitor	CVE-2021-41262No exploit	SQL Injection in Galettegalette · galette · CWE-89 SQL injection	High8.8	1.0%Dec 16, 2021
35Monitor	CVE-2021-41260No exploit	Missing CSRF checks in Galettegalette · galette · CWE-352 Pre-auth CSRF	High8.8	0.4%Dec 16, 2021
30Monitor	CVE-2024-24761No exploit	Galette public pages accessibility restrictiongalette · galette · CWE-863 Pre-auth Broken access control (IDOR)	High7.5	0.6%Mar 6, 2024
21Monitor	CVE-2021-21319No exploit	Galette is a membership management web application geared towards non profit organizations.galette · galette · CWE-79 XSS	Medium5.4	0.8%Oct 25, 2021
21Monitor	CVE-2025-48884No exploit	Galette is vulnerable to XSS through Document Typegalette · galette · CWE-80 Pre-auth XSS	Medium5.3	0.1%Nov 4, 2025
21Monitor	CVE-2025-48076No exploit	Galette is vulnerable to Cross-site Scriptinggalette · galette · CWE-87 Pre-auth XSS	Medium5.3	0.1%Nov 4, 2025
19Monitor	CVE-2021-41261No exploit	Stored Cross-site Scripting in Galettegalette · galette · CWE-79 XSS	Medium4.8	0.6%Dec 16, 2021
19Monitor	CVE-2025-58053No exploit	Galette has a privilege escalation vulnerabilitygalette · galette · CWE-269	Medium4.9	0.3%Dec 19, 2025
8Monitor	CVE-2025-58052No exploit	Galette has groups managers access control bypass on Membersgalette · galette · CWE-863 Broken access control (IDOR)	Low2.1	0.3%Dec 19, 2025
5Monitor	CVE-2025-53922No exploit	Galette has access control bypassgalette · galette · CWE-863 Broken access control (IDOR)	Low1.3	0.2%Dec 19, 2025

CVE-2021-41262
35Monitor
SQL Injection in Galette
HighCVSS 8.8No exploitEPSS 1%
- SQL injection
galette · galetteDec 16, 2021
CVE-2021-41260
35Monitor
Missing CSRF checks in Galette
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
galette · galetteDec 16, 2021
CVE-2024-24761
30Monitor
Galette public pages accessibility restriction
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
galette · galetteMar 6, 2024
CVE-2021-21319
21Monitor
Galette is a membership management web application geared towards non profit organizations.
MediumCVSS 5.4No exploitEPSS 0%
- XSS
galette · galetteOct 25, 2021
CVE-2025-48884
21Monitor
Galette is vulnerable to XSS through Document Type
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- XSS
galette · galetteNov 4, 2025
CVE-2025-48076
21Monitor
Galette is vulnerable to Cross-site Scripting
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- XSS
galette · galetteNov 4, 2025
CVE-2021-41261
19Monitor
Stored Cross-site Scripting in Galette
MediumCVSS 4.8No exploitEPSS 0%
- XSS
galette · galetteDec 16, 2021
CVE-2025-58053
19Monitor
Galette has a privilege escalation vulnerability
MediumCVSS 4.9No exploitEPSS 0%
galette · galetteDec 19, 2025
CVE-2025-58052
8Monitor
Galette has groups managers access control bypass on Members
LowCVSS 2.1No exploitEPSS 0%
- Broken access control (IDOR)
galette · galetteDec 19, 2025
CVE-2025-53922
5Monitor
Galette has access control bypass
LowCVSS 1.3No exploitEPSS 0%
- Broken access control (IDOR)
galette · galetteDec 19, 2025