CVE-2022-34621

Mealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference (IDOR) vulnerability which allows attackers to modify user passwords a...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Mealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference (IDOR) vulnerability which allows attackers to modify user passwords and other attributes via modification of the user_id parameter.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
web cwe.mitre.org
web docs.mealie.io
web gainsec.com
web hub.docker.com
web portswigger.net