CVE-2025-23213

Summary

CVE-2025-23213 is a vulnerability affecting the Tandoor Recipes application. The application, which is used for managing recipes, planning meals, and building shopping lists, has a file upload feature that is vulnerable to Cross-Site Scripting (XSS) attacks. Malicious HTML and SVG files can be uploaded and executed in users' browsers, leading to potential data theft or unauthorized actions. This issue has been resolved in version 1.5.28 of the application.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.