{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3atandoor_recipestandoor_recipes/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:tandoorrecipes:tandoor_recipes:*:*:*:*:*:*:*:*","cpe:2.3:a:tandoor_recipes:tandoor_recipes:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.7,"id":"CVE-2026-115810"},{"cvss":7.1,"id":"CVE-2026-112342"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Tandoor Recipes (\u003c 2.7.0)"],"_cs_severities":["high"],"_cs_tags":["web-vulnerability","ssrf","privilege-escalation","vulnerability","webserver"],"_cs_type":"advisory","_cs_vendors":["Tandoor Recipes"],"content_html":"\u003cp\u003eTandoor Recipes before version 2.7.0 contains a server-side request forgery (SSRF) vulnerability within its Pestle importer component. An authenticated user with low privileges can supply a malicious image URL via a Pestle JSON import file. The application fails to route this input through its centralized, hardened SSRF filter, instead executing a raw \u003ccode\u003erequests.get\u003c/code\u003e call in \u003ccode\u003ecookbook/integration/pestle.py\u003c/code\u003e. This behavior allows the server to be used as a proxy to reach internal network resources, conduct service discovery, or exfiltrate sensitive data from internal services.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an authenticated attacker to perform port and service discovery on the internal network of the host server. Furthermore, the attacker can force the application to exfiltrate responses from internal-only endpoints back to the user through the stored recipe image.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Tandoor Recipes to version 2.7.0 or later immediately to include the patch for CVE-2026-115810.\u003c/li\u003e\n\u003cli\u003eReview web server access logs for anomalous outbound requests originating from the Tandoor application host.\u003c/li\u003e\n\u003cli\u003eSegment the Tandoor Recipes host from sensitive internal network zones to mitigate the impact of potential SSRF exploitation.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-29T20:00:54Z","date_published":"2026-10-29T20:00:39Z","id":"https://feed.craftedsignal.io/briefs/2026-10-tandoor-recipes-ssrf-7139ca9f/","summary":"Tandoor Recipes versions before 2.7.0 are vulnerable to SSRF in the Pestle importer, allowing authenticated low-privileged users to force server-side GET requests to arbitrary internal or external targets.","title":"Tandoor Recipes: Server-side request forgery (CVE-2026-115810)","url":"https://feed.craftedsignal.io/briefs/2026-10-tandoor-recipes-ssrf-7139ca9f/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:tandoor_recipes:tandoor_recipes:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}