CVE-2025-23211

Summary

CVE-2025-23211 is a serious vulnerability affecting the Tandoor Recipes application. This application, used for managing recipes, planning meals, and building shopping lists, contains a Jinja2 Template Injection (SSTI) flaw. This issue enables any user to execute commands on the server, potentially leading to unauthorized access or system compromise. In the case of the provided Docker Compose file, an attacker could exploit this vulnerability as a root user. The latest version of Tandoor Recipes, 1.5.24, includes a fix for this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.