CVE-2024-31993

Mealie CVE-2024-31993 describes a GET-based SSRF in the scrape_image function prior to version 1.4.0. An attacker with access to an untrusted URL can cause the server to fetch, store as original.jpg under the recipe UUID, and potentially expose the file if an admin account is compromised (or in d...

CVE-2024-31993 Mealie vulnerable to a GET-based SSRF in recipe image importer (GHSL-2023-227)

Mealie is a self hosted recipe manager and meal planner. Prior to 1.4.0, the scrapeimage function will retrieve an image based on a user-provided URL, however the provided URL is not validated to point to an external location and does not have any enforced rate limiting. The response from the...

CVE-2024-31992 Mealie contains a DoS vulnerability in recipe importer

Mealie is a self hosted recipe manager and meal planner. Prior to 1.4.0, the safescrapehtml function utilizes a user-controlled URL to issue a request to a remote server, however these requests are not rate-limited. While there are efforts to prevent DDoS by implementing a timeout on requests, it...

CVE-2024-31992

Mealie contains a DoS vulnerability in the safe_scrape_html function used for importing recipes prior to version 1.4.0. The function issues requests to a user-controlled URL without rate limiting, enabling an attacker to trigger a flood of requests. While batching and timeouts mitigate some memor...

CVE-2024-31992 Mealie contains a DoS vulnerability in recipe importer

Mealie is a self hosted recipe manager and meal planner. Prior to 1.4.0, the safescrapehtml function utilizes a user-controlled URL to issue a request to a remote server, however these requests are not rate-limited. While there are efforts to prevent DDoS by implementing a timeout on requests, it...

CVE-2024-31991

Mealie (self-hosted recipe manager) prior to version 1.4.0 is affected by an SSRF in the safe_scrape_html function, which takes a user-controlled URL and makes a remote request without URL restrictions. This can allow an authenticated user to identify HTTP(S) servers on the local network that Mea...

CVE-2024-31991 Mealie vulnerable to a GET-based SSRF in recipe importer (GHSL-2023-225)

Mealie is a self hosted recipe manager and meal planner. Prior to 1.4.0, the safescrapehtml function utilizes a user-controlled URL to issue a request to a remote server. Based on the content of the response, it will either parse the content or disregard it. This function, nor those that call it,...

Mealie 安全漏洞

Mealie is a self-hosted recipe manager and meal planner from an individual developer in Hayden, USA. A security vulnerability exists in Mealie versions prior to 1.4.0, which stems from a safescrapehtml function that utilizes a user-controlled URL to make a request to a remote server, which can be...

编号撤回

Mealie is a self-hosted recipe manager and meal planner by Hayden Individual Developers in the United States. This CVE number has been withdrawn...

Open Source Threat Intelligence Gathering & Processing Framework: GOSINT

The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise IOCs. GOSINT allows a security analyst to collect and standardize structured and unstructured threat intelligence. Applying threat intelligence to security operations enriches...

Joomla component Recipe Manager v2. 2 parameter id SQL injection vulnerability

Joomla! Component Recipe Manager v2. 2 - SQL Injection Joomla! Component Recipe Manager v2. 2, The presence of the parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can be directly used Injection point:...

recipe manager, 2.2

recipe manager by joomla6teen.com, 2.2, SQL Injection...

Joomla Recipe Manager 2.2 SQL Injection

Exploit Title: Joomla! Component Recipe Manager v2.2 - SQL Injection Google Dork: inurl:index.php?option=comrecipe Date: 02.03.2017 Vendor Homepage: http://joomla6teen.com/ Software: https://extensions.joomla.org/extensions/extension/vertical-markets/thematic-directory/recipe-manager/ Demo:...

Joomla Recipe Manager 2.2 Component - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Recipe Manager v2.2 - SQL Injection Google Dork: inurl:index.php?option=comrecipe Date: 02.03.2017 Vendor Homepage: http://joomla6teen.com/ Software:...

Recipe Manager Component 'id' Parameter SQL Injection Vulnerability

Joomla! is an open source content management system CMS, the system provides RSS feeds, site search and other functions. A SQL injection vulnerability exists in the 'id' parameter of the Recipe Manager component of Joomla! which can be exploited by attackers to access or modify database data...

Joomla! Component Recipe Manager 2.2 - id SQL Injection

Joomla! Component Recipe Manager 2.2 - id SQL Injection Exploit Title: Joomla! Component Recipe Manager v2.2 - SQL Injection Google Dork: inurl:index.php?option=comrecipe Date: 02.03.2017 Vendor Homepage: http://joomla6teen.com/ Software:...

Joomla! Component Recipe Manager 2.2 - 'id' SQL Injection

Exploit Title: Joomla! Component Recipe Manager v2.2 - SQL Injection Google Dork: inurl:index.php?option=comrecipe Date: 02.03.2017 Vendor Homepage: http://joomla6teen.com/ Software: https://extensions.joomla.org/extensions/extension/vertical-markets/thematic-directory/recipe-manager/ Demo:...

My CookBook (Recipe Manager) - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application My CookBook Recipe Manager published at the 'play' market has multiple vulnerabilities...