Cpe:2.3:a:tandoor_recipes:tandoor_recipes:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3atandoor_recipestandoor_recipes/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 29 Oct 2026 20:00:39 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgTandoor Recipes: Server-side request forgery (CVE-2026-115810)https://feed.craftedsignal.io/briefs/2026-10-tandoor-recipes-ssrf-7139ca9f/Thu, 29 Oct 2026 20:00:39 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-tandoor-recipes-ssrf-7139ca9f/Tandoor Recipes versions before 2.7.0 are vulnerable to SSRF in the Pestle importer, allowing authenticated low-privileged users to force server-side GET requests to arbitrary internal or external targets.Tandoor Recipes before version 2.7.0 contains a server-side request forgery (SSRF) vulnerability within its Pestle importer component. An authenticated user with low privileges can supply a malicious image URL via a Pestle JSON import file. The application fails to route this input through its centralized, hardened SSRF filter, instead executing a raw requests.get call in cookbook/integration/pestle.py. This behavior allows the server to be used as a proxy to reach internal network resources, conduct service discovery, or exfiltrate sensitive data from internal services.

Impact

Successful exploitation allows an authenticated attacker to perform port and service discovery on the internal network of the host server. Furthermore, the attacker can force the application to exfiltrate responses from internal-only endpoints back to the user through the stored recipe image.

Recommendation

  • Upgrade Tandoor Recipes to version 2.7.0 or later immediately to include the patch for CVE-2026-115810.
  • Review web server access logs for anomalous outbound requests originating from the Tandoor application host.
  • Segment the Tandoor Recipes host from sensitive internal network zones to mitigate the impact of potential SSRF exploitation.
]]>highadvisoryweb-vulnerabilityssrfprivilege-escalationvulnerabilitywebserver