CVE-2022-34624 | BDVDB-2026-182736 Detail

Description#

Mealie1.0.0beta3 does not terminate download tokens after a user logs out, allowing attackers to perform a man-in-the-middle attack via a crafted GET request.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://gainsec.com/2022/08/19/cve-2022-34615-cve-2022-34621-cve-2022-34623-cve-2022-34624/

Exploit#

No public exploit known

History#

Version 12022-08-19Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.