CVE-2024-55072

creationtimestamp| type| source ---|---|--- 2025-03-27 19:27:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9187 2025-03-27 20:50:27+00:00| seen| https://t.me/cvedetector/21335...

CVE-2024-55072

The hay-kot mealie recipe manager (v2.2.0) contains a Broken Object Level Authorization vulnerability in the /api/users/{user-id} component. This flaw allows users to edit their own profiles to escalate privileges or modify their household information. A proof-of-concept was published on 2025-03-...

CVE-2024-55072

A Broken Object Level Authorization vulnerability in the component /api/users/user-id of hay-kot mealie v2.2.0 allows users to edit their own profile in order to give themselves more permissions or to change their household...

CVE-2024-55072

A Broken Object Level Authorization vulnerability in the component /api/users/user-id of hay-kot mealie v2.2.0 allows users to edit their own profile in order to give themselves more permissions or to change their household...