PT-2025-4851 · Unknown · Tandoor Recipes

M10X · Published 2025-01-28 · Updated 2025-01-28 · CVE-2025-23212

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tandoor Recipes versions prior to 1.5.28

Description Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. The external storage feature allows any user to enumerate the name and content of files on the server.

Recommendations Tandoor Recipes versions prior to 1.5.28 should be updated to version 1.5.28 to fix the issue.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-23212

GHSA-JRGJ-35JX-2QQ7

Affected Products

Tandoor Recipes

References · 9

• 🔥 https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-jrgj-35jx-2qq7 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/23xxx/CVE-2025-23212.json · Exploit
• https://github.com/TandoorRecipes/recipes/commit/36e83a9d0108ac56b9538b45ead57efc8b97c5ff · Patch
• https://osv.dev/vulnerability/CVE-2025-23212 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-23212 · Security Note
• https://t.me/cvedetector/16608 · Telegram Post
• https://t.me/latest_high_impact_cve/1779 · Telegram Post
• https://twitter.com/CVEnew/status/1884265626178625614 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1884287621402095793 · Twitter Post