medium5.3
CVE-2022-32425
The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time.
Impact
The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mealie | Mealie | Version 1.0.0 |