CVE-2022-34625

Mealie1.0.0beta3 was discovered to contain a Server-Side Template Injection vulnerability, which allows attackers to execute arbitrary code via a crafted Jinja2 template...

CVE-2022-34625

creationtimestamp| type| source ---|---|--- 2022-08-02 20:18:15+00:00| seen| https://t.me/cibsecurity/47420...

CVE-2022-34625

CVE-2022-34625 affects Mealie 1.0.0beta3 with a Server-Side Template Injection via a crafted Jinja2 template, enabling arbitrary code execution. CVSS v3.1: 7.2 (HIGH) base score; AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. Impact: High on confidentiality, integrity, and availability. Affected product/ve...