CVE-2024-24761

CVE-2024-24761 affects Galette (membership management app). Public pages were by default restricted to admins/staff in versions 1.0.0–1.0.1; configuration allowed restricting to up-to-date members or everyone. Version 1.0.2 fixes this access-control issue. Connected sources confirm the affected r...