← Database

CVE-2024-55070

LOW CVSS: 3.1 Published: 2025-03-27 Modified: 2026-06-17

Description

A Broken Object Level Authorization vulnerability in the component /households/permissions of hay-kot mealie v2.2.0 allows group managers to edit their own permissions.

Affected Platforms

Mealie Mealie

Weakness Type

CWE-862

References