Linux Distros Unpatched Vulnerability : CVE-2021-41260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Galette is a membership management web application built for non profit organizations and released under GPLv3. Versions prior to 0.9.6 do not check for Cross...

CVE-2021-41260

Galette is a membership management web application built for non profit organizations and released under GPLv3. Versions prior to 0.9.6 do not check for Cross Site Request Forgery attacks. All users are advised to upgrade to 0.9.6 as soon as possible. There are no known workarounds for this issue...

CVE-2021-41260

CVE-2021-41260 affects Galette, a PHP-based membership management app. The issue is missing Cross-Site Request Forgery (CSRF) protections in versions prior to 0.9.6. Public disclosures from multiple sources (NVD, Red Hat, Ubuntu, CNVD, OSV) all state no CSRF checks exist before 0.9.6 and recommen...