Unscored CVE-2022-34621 EUVD-2022-37573GHSA-84q6-9hr7-2jh7

Mealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference (IDOR) vulnerability which allows attackers to modify user …

Published Aug 19, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

Mealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference (IDOR) vulnerability which allows attackers to modify user passwords and other attributes via modification of the user_id parameter.

References

https://portswigger.net/web-security/access-control/idor
https://cwe.mitre.org/data/definitions/639.html
https://hub.docker.com/r/hkotel/mealie
https://docs.mealie.io/changelog/v0.5.6/
https://gainsec.com/2022/08/19/cve-2022-34615-cve-2022-34621-cve-2022-34623-cve-2022-34624/