CVE-2024-0403: Tandoor Recipes

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Recipes version 1.5.10 allows arbitrary HTTP requests to be made through the server. This is possible because the application is vulnerable to SSRF.

Affected products

Published 2024-03-01. Last modified 2026-06-17.