CVE-2024-31994
Last modified
CVE-2024-31994 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. Mealie is a self hosted recipe manager and meal planner. Prior to 1.4.0, an attacker can point the image request to an arbitrarily large file. EPSS estimates a 0.28% chance of exploitation in the next 30 days.
Description
Mealie is a self hosted recipe manager and meal planner. Prior to 1.4.0, an attacker can point the image request to an arbitrarily large file. Mealie will attempt to retrieve this file in whole. If it can be retrieved, it may be stored on the file system in whole (leading to possible disk consumption), however the more likely scenario given resource limitations is that the container will OOM during file retrieval if the target file size is greater than the allocated memory of the container. At best this can be used to force the container to infinitely restart due to OOM (if so configured in `docker-compose.yml), or at worst this can be used to force the Mealie container to crash and remain offline. In the event that the file can be retrieved, the lack of rate limiting on this endpoint also permits an attacker to generate ongoing requests to any target of their choice, potentially contributing to an external-facing DoS attack. This vulnerability is fixed in 1.4.0.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mealie | Mealie | < 1.4.0 |
References
- https://github.com/mealie-recipes/mealie/pull/3368Issue Tracking, Patch
- https://securitylab.github.com/advisories/GHSL-2023-225_GHSL-2023-226_Mealie/Exploit, Third Party Advisory
- https://github.com/mealie-recipes/mealie/pull/3368Issue Tracking, Patch
- https://securitylab.github.com/advisories/GHSL-2023-225_GHSL-2023-226_Mealie/Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-31994?
How severe is CVE-2024-31994?
How do I fix CVE-2024-31994?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-31989Argo CD is a declarative, GitOps continuous delivery tool fo…9
- CVE-2024-3199The The Plus Addons for Elementor plugin for WordPress is vu…5.4
- CVE-2024-31990Argo CD is a declarative, GitOps continuous delivery tool fo…6.3
- CVE-2024-31991Mealie is a self hosted recipe manager and meal planner. Pri…3.5
- CVE-2024-31992Mealie is a self hosted recipe manager and meal planner. Pri…6.5
- CVE-2024-31993Mealie is a self hosted recipe manager and meal planner. Pri…4.5
- CVE-2024-31995`@digitalbazaar/zcap` provides JavaScript reference implemen…4.3
- CVE-2024-31996XWiki Platform is a generic wiki platform. Starting in versi…9.8
- CVE-2024-31997XWiki Platform is a generic wiki platform. Prior to versions…8.8
- CVE-2024-31998Combodo iTop is a simple, web based IT Service Management to…8.8
- CVE-2024-31999@festify/secure-session creates a secure stateless cookie se…7.4
- CVE-2024-3200The wpForo Forum plugin for WordPress is vulnerable to SQL I…6.5
Are you affected by CVE-2024-31994?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST