Skip to content
Threat Feed
Subscribe

Product

Tandoor Recipes (< 2.6.12)

1 brief RSS
high advisory

Blind SSRF in Tandoor Recipes via AI Provider Configuration

Authenticated users can exploit a blind Server-Side Request Forgery vulnerability in Tandoor Recipes versions prior to 2.6.10 by manipulating AI provider URL inputs to map internal network resources.

Tandoor Recipes +1 web-vulnerability ssrf reconnaissance web-application authentication-bypass cve
4t 1c