CVE-2022-34621: Mealie

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

Mealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference (IDOR) vulnerability which allows attackers to modify user passwords and other attributes via modification of the user_id parameter.

Affected products

• Mealie Mealie: version 0.5.5 only; version 1.0.0 only

Published 2022-08-19. Last modified 2026-06-17.