Vulnerability Details CVE-2024-0403
Recipes version 1.5.10 allows arbitrary HTTP requests to be made
through the server. This is possible because the application is
vulnerable to SSRF.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.2%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2024-0403
-
cpe:2.3:a:tandoor:recipes:1.5.10