Security Advisory

CVE-2022-23071

6.5
MEDIUM

Vulnerability Description

In Recipes, versions 0.9.1 through 1.2.5 are vulnerable to Server Side Request Forgery (SSRF), in the “Import Recipe” functionality. When an attacker enters the localhost URL, a low privileged attacker can access/read the internal file system to access sensitive information.
Published Date June 19, 2022
Official Source NIST NVD Advisory