CVE-2022-23071

CVE-2022-23071: Recipes - SSRF on Import

Vendor Recipes
Product recipes
Weakness CWE-918 · SSRF
Published June 19, 2022
Last update September 17, 2024

CVSS base score

What the vulnerability does

01Description

In Recipes, versions 0.9.1 through 1.2.5 are vulnerable to Server Side Request Forgery (SSRF), in the “Import Recipe” functionality. When an attacker enters the localhost URL, a low privileged attacker can access/read the internal file system to access sensitive information.

Key dates

02Disclosure timeline

June 19, 2022 CVE published
September 17, 2024 Record updated