2025-03-27 00:00:00
mitre
PUBLISHED
A Broken Object Level Authorization vulnerability in the component /households/permissions of hay-kot mealie v2.2.0 allows group managers to edit their own permissions.