← Zuruck zu CVEs
CVE-2024-0403
MEDIUM6.5
Beschreibung
Recipes version 1.5.10 allows arbitrary HTTP requests to be made through the server. This is possible because the application is vulnerable to SSRF.
CVE Details
CVSS v3.1 Bewertung6.5
SchweregradMEDIUM
CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
AngriffsvektorNETWORK
KomplexitatLOW
Erforderliche PrivilegienNONE
BenutzerinteraktionNONE
Veroffentlicht3/1/2024
Zuletzt geandert5/19/2025
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
tandoor:recipes
Schwachen (CWE)
CWE-918
Referenzen
https://fluidattacks.com/advisories/harris/(help@fluidattacks.com)
https://github.com/TandoorRecipes/recipes/(help@fluidattacks.com)
https://fluidattacks.com/advisories/harris/(af854a3a-2127-422b-91ae-364da2661108)
https://github.com/TandoorRecipes/recipes/(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.