CVE-2024-55072

creationtimestamp| type| source ---|---|--- 2025-03-27 19:27:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9187 2025-03-27 20:50:27+00:00| seen| https://t.me/cvedetector/21335...

CVE-2024-55072

The self-hosted recipe manager and meal planner Mealie v2.2.0 is affected by a Broken Object Level Authorization vulnerability in the /api/users/{user-id} component. This flaw allows users to edit their own profiles to improperly grant themselves additional permissions or change their household. ...

CVE-2024-55072

A Broken Object Level Authorization vulnerability in the component /api/users/user-id of hay-kot mealie v2.2.0 allows users to edit their own profile in order to give themselves more permissions or to change their household...

CVE-2024-55072

A Broken Object Level Authorization vulnerability in the component /api/users/user-id of hay-kot mealie v2.2.0 allows users to edit their own profile in order to give themselves more permissions or to change their household...