CVE-2022-34621

6.5 mediumEPSS 1.1%

Medium (6.5) in mealie mealie. EPSS 1.1% chance of exploitation in the next 30 days.

Mealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference (IDOR) vulnerability which allows attackers to modify user passwords and other attributes via modification of the user_id parameter.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-639
Published: 2022-08-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mealie:mealie

References

https://cwe.mitre.org/data/definitions/639.html
https://docs.mealie.io/changelog/v0.5.6/
https://gainsec.com/2022/08/19/cve-2022-34615-cve-2022-34621-cve-2022-34623-cve-2022-34624/
https://hub.docker.com/r/hkotel/mealie
https://portswigger.net/web-security/access-control/idor

Check your stack JSON