by Kastro
Paper/Archive/CVE-2025-23211

CVE-2025-23211

TandoorRecipes recipes — Tandoor Recipes - SSTI - Remote Code Execution

EPSS 4%public exploitCVSS 10.0
critical.is priorityof 100
58
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 89.3.893 × 2017.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to execute commands on the server. In the case of the provided Docker Compose file as root. This vulnerability is fixed in 1.5.24.

Affected

ProductAffectedFixed inSource
recipes< 1.5.24–CNA

Scores by source

GitHub_M (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

exploitgithub.com/TandoorRecipes/recipes/security/advisories/GHSA-r6rj-h75w-vj8vrefgithub.com/TandoorRecipes/recipes/commit/e6087d5129cc9d0c24278948872377e66c2a2c20refgithub.com/TandoorRecipes/recipes/blob/4f9bff20c858180d0f7376de443a9fe4c123a50c/cookbook/helper/template_helper.py#L95