CVE-2022-34619

概要

参考情報

• cwe.mitre.org/data/definitions/79.html · Third Party Advisory
• docs.mealie.io/changelog/v0.5.6 · Release Notes
• gainsec.com/2022/08/02/cve-2022-34613-cve-2022-34618-cve-2022-34619-xss-file-upload-and-more · Exploit
• hub.docker.com/r/hkotel/mealie · Product
• huntr.dev/bounties/aa610613-6ebb-4544-9aa6-046dc28fe4ff · Exploit

mealie のその他の脆弱性

• CVE-2022-34625高 7.2Mealie1.0.0beta3 was discovered to contain a Server-Side Template Injection vulnerability, which allows attackers to execute arbitrary code …
• CVE-2022-34618中 5.4A stored cross-site scripting (XSS) vulnerability in Mealie 1.0.0beta3 allows attackers to execute arbitrary web scripts or HTML via a craft…
• CVE-2022-34613緊急 9.8Mealie 1.0.0beta3 contains an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file.