What’s Vulnerable › Vulnerabilities

CVE-2024-55070

• Severity: low (CVSS 3.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-03-27 · updated 2026-06-17
• Weakness: CWE-862

Description

A Broken Object Level Authorization vulnerability in the component /households/permissions of hay-kot mealie v2.2.0 allows group managers to edit their own permissions.

Affected products

• mealie-recipes mealie: 2.2.0

References

• https://github.com/mealie-recipes/mealie/issues/4593
• https://m10x.de/posts/2025/03/all-your-recipe-are-belong-to-us-part-3/3-broken-access-controls-leading-to-privilege-escalation-and-more-in-mealie/

Get alerted when CVE-2024-55070 or the next vulnerability affects your stack