CVE-2024-24761

Galette is a membership management web application for non profit organizations. Starting in version 1.0.0 and prior to version 1.0.2, public pages are per default restricted to only administrators and staff members. From configuration, it is possible to restrict to up-to-date members or to everyone. Version 1.0.2 fixes this issue.

• CWE-863
• CWE-863

• https://github.com/galette/galette/commit/a5c18bb9819b8da1b3ef58f3e79577083c657fbbPatch
• https://github.com/galette/galette/security/advisories/GHSA-jrqg-mpwv-pxpvVendor Advisory
• https://github.com/galette/galette/commit/a5c18bb9819b8da1b3ef58f3e79577083c657fbbPatch
• https://github.com/galette/galette/security/advisories/GHSA-jrqg-mpwv-pxpvVendor Advisory

Published

Mar 6, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-24756Crafatar serves Minecraft avatars based on the skin for use …7.5
• CVE-2024-24757open-irs is an issue response robot that reponds to issues i…9.8
• CVE-2024-24758Undici is an HTTP/1.1 client, written from scratch for Node.…4.5
• CVE-2024-24759MindsDB is a platform for building artificial intelligence f…9.1
• CVE-2024-2476The OceanWP theme for WordPress is vulnerable to unauthorize…4.3
• CVE-2024-24760mailcow is a dockerized email package, with multiple contain…7.3
• CVE-2024-24762`python-multipart` is a streaming multipart parser for Pytho…7.5
• CVE-2024-24763JumpServer is an open source bastion host and an operation a…6.1
• CVE-2024-24764October is a self-hosted CMS platform based on the Laravel P…4.8
• CVE-2024-24765CasaOS-UserService provides user management functionalities …9.8
• CVE-2024-24766CasaOS-UserService provides user management functionalities …7.5
• CVE-2024-24767CasaOS-UserService provides user management functionalities …9.8