← Database

CVE-2022-34624

MEDIUM CVSS: 5.9 Published: 2022-08-19 Modified: 2026-07-09

Description

Mealie1.0.0beta3 does not terminate download tokens after a user logs out, allowing attackers to perform a man-in-the-middle attack via a crafted GET request.

Affected Platforms

Mealie Mealie

Weakness Type

CWE-613

References