medium6.5
CVE-2024-0403
Recipes version 1.5.10 allows arbitrary HTTP requests to be made through the server.
Impact
Recipes version 1.5.10 allows arbitrary HTTP requests to be made through the server. This is possible because the application is vulnerable to SSRF.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tandoor | Recipes | Version 1.5.10 |