Beveiligingsadvies

CVE-2024-55073

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-27 00:00:00
Laatst bijgewerkt 2025-03-27 19:56:39
Toegewezen door mitre
CVSS-score 7.6
Status PUBLISHED

Beschrijving

A Broken Object Level Authorization vulnerability in the component /api/users/{user-id} of hay-kot mealie v2.2.0 allows users to edit their own profile in order to give themselves more permissions or to change their household.