CVE-2022-34615

Опубликовано: 19 авг. 2022

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Mealie 1.0.0beta3 employs weak password requirements which allows attackers to potentially gain unauthorized access to the application via brute-force attacks.

Ссылки

https://cwe.mitre.org/data/definitions/521.html
Third Party Advisory
https://docs.mealie.io/changelog/v0.5.6/
Release Notes
Third Party Advisory
https://gainsec.com/2022/08/19/cve-2022-34615-cve-2022-34621-cve-2022-34623-cve-2022-34624/
Third Party Advisory
https://hub.docker.com/r/hkotel/mealie
Product
Third Party Advisory
https://cwe.mitre.org/data/definitions/521.html
Third Party Advisory
https://docs.mealie.io/changelog/v0.5.6/
Release Notes
Third Party Advisory
https://gainsec.com/2022/08/19/cve-2022-34615-cve-2022-34621-cve-2022-34623-cve-2022-34624/
Third Party Advisory
https://hub.docker.com/r/hkotel/mealie
Product
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mealie:mealie:0.5.5:*:*:*:*:*:*:*

cpe:2.3:a:mealie:mealie:1.0.0:beta3:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.00607

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-521

Связанные уязвимости

GHSA-83mh-8mgc-grcj