PoC Index

CVE-2025-23211

CRITICAL 9.9EPSS 3.6%

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to execute commands on the server. In the case of the provided Docker Compose file as root. This vulnerability is fixed in 1.5.24.

CVSS v3.1
9.9 CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v3.1
9.9 CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
EPSS
3.59% chance of exploitation in the next 30 days, 89th percentile
Nuclei
critical
Published
2025-01-28

Proof-of-concept exploits (2)

Nuclei templates (1)

References

Related