CVE-2025-23211 — Tandoor Recipes - SSTI - Remote Code Execution
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to execute commands on the serve…
Published: 2025-01-28 · CVSS: 10.0 · CVSS 3.1
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to execute commands on the server. In the case of the provided Docker Compose file as root. This vulnerability is fixed in 1.5.24.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7