PT-2021-23223
CVE-2021-41262
·
تاريخ النشر
2021-12-16
·
تاريخ التحديث
2021-12-21
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Galette versions prior to 0.9.6
Description
Galette is a membership management web application built for non-profit organizations and released under GPLv3. The issue allows SQL injection attacks by users with
member privilege. There are no known workarounds.Recommendations
For versions prior to 0.9.6, upgrade to version 0.9.6 as soon as possible to resolve the issue. As a temporary workaround, consider restricting the
member privilege to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾