CVE-2024-0403: Recipes 1.5.10 - Blind SSRF
Published Feb 29, 2024
·Updated
Recipes version 1.5.10 allows arbitrary HTTP requests to be made
through the server. This is possible because the application is
vulnerable to SSRF.
Affected Software
1 affected component
Tandoor Recipes=1.5.10
Event History
Feb 29, 2024
CVE Published
via MITRE·11:31 PM
Data Sourced
via MITRE·11:31 PM
DescriptionSeverityWeakness
Mar 1, 2024
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-0403?
CVE-2024-0403 has a critical severity rating due to the potential for arbitrary HTTP requests through SSRF.
2
How do I fix CVE-2024-0403?
To fix CVE-2024-0403, update to a patched version of Tandoor Recipes that addresses the SSRF vulnerability.
3
What types of attacks are possible due to CVE-2024-0403?
CVE-2024-0403 could allow attackers to make unauthorized requests to internal services, potentially leading to data exposure or further attacks.
4
Which versions are affected by CVE-2024-0403?
CVE-2024-0403 affects Tandoor Recipes version 1.5.10.
5
Is CVE-2024-0403 a common vulnerability?
CVE-2024-0403 is a specific vulnerability linked to SSRF, which is a common type of security flaw in web applications.