Description
Recipes version 1.5.10 allows arbitrary HTTP requests to be made
through the server. This is possible because the application is
vulnerable to SSRF.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Recipes | Recipes | 1.5.10 | — |
Medium · 6.5
CVE-2024-0403
EUVD-2024-16199GHSA-92x5-9q2r-x8gq
Recipes 1.5.10 - Blind SSRF
Published Feb 29, 2024 · Updated May 19, 2025 · Assigned by Fluid Attacks