Mealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference (IDOR) vulnerability which allows attackers to modify user passwords and other attributes via modification of the user_id parameter.
| Software | From | Fixed in |
|---|---|---|
| mealie / mealie | 0.5.5 | 0.5.5.x |
| mealie / mealie | 1.0.0-beta3 | 1.0.0-beta3.x |