CVE-2025-23211

Publication date

2025-01-28 15:24:27

Family

GitHub_M

State

PUBLISHED

Description

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to execute commands on the server. In the case of the provided Docker Compose file as root. This vulnerability is fixed in 1.5.24.