GCVE - cpe:2.3:a:recipes:recipes:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:recipes:recipes:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Recipes (`cf820ce9-7fe2-565d-b88f-2a5da371b0da`)
Product	Recipes (`895317e6-95a9-536f-a729-e086aa8a6b6f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-0403`	vulnerable	2026-06-08 06:22:00.587959	db.gcve.eu details are currently unavailable. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23074`	vulnerable	2026-06-08 05:40:56.149079	Recipes - Stored XSS in Name Parameter In Recipes, versions 0.17.0 through 1.2.5 are vulnerable to Stored Cross-Site Scripting (XSS), in the ‘Name’ field of Keyword, Food and Unit components. When a victim accesses the Keyword/Food/Unit endpoints, the XSS payload will trigger. A low privileged attacker will have the victim's API key and can lead to admin's account takeover. Published: 2022-06-21T09:20:10.647Z Updated: 2024-09-16T18:55:57.596Z Open on db.gcve.eu Reference links https://github.com/TandoorRecipes/recipes/commit/7b2117c0190d4f541ba4cc7ee4122f04738c4ac6 https://www.mend.io/vulnerability-database/CVE-2022-23074	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23073`	vulnerable	2026-06-08 05:40:56.148618	Recipes - Stored XSS in Clipboard In Recipes, versions 1.0.5 through 1.2.5 are vulnerable to Stored Cross-Site Scripting (XSS), in copy to clipboard functionality. When a victim accesses the food list page, then adds a new Food with a malicious javascript payload in the ‘Name’ parameter and clicks on the clipboard icon, an XSS payload will trigger. A low privileged attacker will have the victim's API key and can lead to admin's account takeover. Published: 2022-06-21T08:50:09.781Z Updated: 2024-09-16T17:38:44.584Z Open on db.gcve.eu Reference links https://github.com/TandoorRecipes/recipes/commit/7b2117c0190d4f541ba4cc7ee4122f04738c4ac6 https://www.mend.io/vulnerability-database/CVE-2022-23073	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23072`	vulnerable	2026-06-08 05:40:56.148256	Recipes - Stored XSS in Add to Cart In Recipes, versions 1.0.5 through 1.2.5 are vulnerable to Stored Cross-Site Scripting (XSS), in “Add to Cart” functionality. When a victim accesses the food list page, then adds a new Food with a malicious javascript payload in the ‘Name’ parameter and clicks on the Add to Shopping Cart icon, an XSS payload will trigger. A low privileged attacker will have the victim's API key and can lead to admin's account takeover. Published: 2022-06-21T08:10:11.137Z Updated: 2024-09-16T17:57:56.973Z Open on db.gcve.eu Reference links https://www.mend.io/vulnerability-database/CVE-2022-23072 https://github.com/TandoorRecipes/recipes/commit/7b2117c0190d4f541ba4cc7ee4122f04738c4ac6	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23071`	vulnerable	2026-06-08 05:40:56.147257	Recipes - SSRF on Import In Recipes, versions 0.9.1 through 1.2.5 are vulnerable to Server Side Request Forgery (SSRF), in the “Import Recipe” functionality. When an attacker enters the localhost URL, a low privileged attacker can access/read the internal file system to access sensitive information. Published: 2022-06-19T10:15:14.995Z Updated: 2024-09-17T02:16:41.615Z Open on db.gcve.eu Reference links https://www.mend.io/vulnerability-database/CVE-2022-23071 https://github.com/TandoorRecipes/recipes/commit/d48fe26a3529cc1ee903ffb2758dfd8f7efaba8c	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Recipes

Notes

PURL mappings

Vulnerability references

Contribute