The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time.

Published Jul 14, 2022 · Updated Aug 3, 2024 · Assigned by mitre