NetSight
medium5.3

CVE-2022-32425

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time.

Impact

The login function of Mealie v1.0.0beta-2 allows attackers to enumerate existing usernames by timing the server's response time.

Affected products

VendorProductAffected versions
MealieMealie
Version 1.0.0

Weakness classification

References