CVE-2022-34621: Medium severity mealie vulnerability
Published Aug 19, 2022
·Updated
Mealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference (IDOR) vulnerability which allows attackers to modify user passwords and other attributes via modification of the userid parameter.
Affected Software
2 affected components
Mealie Mealie=0.5.5
Mealie Mealie=1.0.0-beta3
Event History
Aug 19, 2022
CVE Published
via MITRE·01:21 PM
Data Sourced
via MITRE·01:21 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-34621?
CVE-2022-34621 is categorized as a critical vulnerability due to its potential for unauthorized access to user accounts.
2
How do I fix CVE-2022-34621?
To fix CVE-2022-34621, update Mealie to version 0.5.6 or later, which addresses this vulnerability.
3
What does CVE-2022-34621 allow an attacker to do?
CVE-2022-34621 allows an attacker to modify user passwords and attributes by exploiting the insecure direct object reference.
4
Which versions of Mealie are affected by CVE-2022-34621?
CVE-2022-34621 affects Mealie versions 0.5.5 and 1.0.0-beta3.
5
What are the implications of not addressing CVE-2022-34621?
Not addressing CVE-2022-34621 can lead to unauthorized access, account compromise, and potential data breaches.