Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:tandoorrecipes:tandoor_recipes:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Blind SSRF in Tandoor Recipes via AI Provider Configuration

Authenticated users can exploit a blind Server-Side Request Forgery vulnerability in Tandoor Recipes versions prior to 2.6.10 by manipulating AI provider URL inputs to map internal network resources.

Tandoor Recipes +1 web-vulnerability ssrf reconnaissance web-application authentication-bypass cve
4t 1c