Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-23071
6.5
MEDIUMCVSS v3
Severity scale
010
Description
In Recipes, versions 0.9.1 through 1.2.5 are vulnerable to Server Side Request Forgery (SSRF), in the “Import Recipe” functionality. When an attacker enters the localhost URL, a low privileged attacker can access/read the internal file system to access sensitive information.
TandoorRecipes/recipes
GitHubApplication for managing recipes, planning meals, building shopping lists and much much more!
GitHubApplication for managing recipes, planning meals, building shopping lists and much much more!>= 0.9.1, <= 1.2.5NVD