Vulnerability · Published Jan 28, 2025 · Assigned by GitHub_M
CVE-2025-23211Tandoor Recipes - SSTI - Remote Code Execution
Critical 10.0
In plain English
A critical-severity security flaw in recipes from TandoorRecipes. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 3.7% (higher than 90% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code.
Severity (CVSS 3.1)10.0Critical
Exploit odds (30 days)3.7%top 10.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling2Nuclei, Public PoC
Official description
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to execute commands on the server. In the case of the provided Docker Compose file as root. This vulnerability is fixed in 1.5.24.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TandoorRecipes | recipes | < 1.5.24 |
Weakness: CWE-1336 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
References
- https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-r6rj-h75w-vj8v x_refsource_CONFIRM
- https://github.com/TandoorRecipes/recipes/commit/e6087d5129cc9d0c24278948872377e66c2a2c20 x_refsource_MISC
- https://github.com/TandoorRecipes/recipes/blob/4f9bff20c858180d0f7376de443a9fe4c123a50c/cookbook/helper/template_helper.py#L95 x_refsource_MISC