CVE-2024-55073

A Broken Object Level Authorization vulnerability in the component /api/users/user-id of hay-kot mealie v2.2.0 allows users to edit their own profile in order to give themselves more permissions or to change their household...

CVE-2024-55072

A Broken Object Level Authorization vulnerability in the component /api/users/user-id of hay-kot mealie v2.2.0 allows users to edit their own profile in order to give themselves more permissions or to change their household...

PT-2025-13392

Name of the Vulnerable Software and Affected Versions hay-kot mealie version 2.2.0 Description A Broken Object Level Authorization issue exists in the "/api/users/user-id" component, allowing users to modify their own profiles and potentially grant themselves additional permissions or change thei...