Medium severity6.5NVD Advisory· Published Aug 19, 2022· Updated Jun 17, 2026

CVE-2022-34621

Description

Mealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference (IDOR) vulnerability which allows attackers to modify user passwords and other attributes via modification of the user_id parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mealie/Mealiecpe-rescue4 versions
(expand)+ 3 more
- (no CPE)
- cpe:2.3:a:mealie:mealie:0.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:mealie:mealie:1.0.0:beta3:*:*:*:*:*:*
- (no CPE)range: = 1.0.0beta3

Patches

Vulnerability mechanics

References

cwe.mitre.org/data/definitions/639.htmlnvdThird Party Advisory
docs.mealie.io/changelog/v0.5.6/nvdRelease NotesThird Party Advisory
gainsec.com/2022/08/19/cve-2022-34615-cve-2022-34621-cve-2022-34623-cve-2022-34624/nvdThird Party Advisory
hub.docker.com/r/hkotel/mealienvdProductThird Party Advisory
portswigger.net/web-security/access-control/idornvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000