CVE-2022-34625

概要

参考情報

• cwe.mitre.org/data/definitions/1336.html · Third Party Advisory
• cwe.mitre.org/data/definitions/94.html · Third Party Advisory
• docs.mealie.io/changelog/v0.5.6 · Release Notes
• gainsec.com/2022/08/02/cve-2022-34625-ssti-rce-mealie · Exploit
• hub.docker.com/r/hkotel/mealie · Product

mealie のその他の脆弱性

• CVE-2022-34619中 5.4A stored cross-site scripting (XSS) vulnerability in Mealie v0.5.5 allows attackers to execute arbitrary web scripts or HTML via a crafted p…
• CVE-2022-34618中 5.4A stored cross-site scripting (XSS) vulnerability in Mealie 1.0.0beta3 allows attackers to execute arbitrary web scripts or HTML via a craft…
• CVE-2022-34613緊急 9.8Mealie 1.0.0beta3 contains an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file.