Kitchenowl
Approved changes feed: RSS · Atom
cpe:2.3:a:tombursch:kitchenowl:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Tombursch (dda3e4a3-6e6b-5df7-91ca-14931f87968d) |
|---|---|
| Product | Kitchenowl (ee5cb0bf-4cdd-5419-86c1-69b1a697c9c9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-111899 |
vulnerable | 2026-11-03 10:16:10.579367 |
KitchenOwl through 0.7.10 SSRF via Recipe Import scrapeKitchenOwl Fetch
MEDIUM (4.3)
KitchenOwl through 0.7.10 contains a server-side request forgery vulnerability in recipe import that allows authenticated household members to bypass IP filtering via a second unfiltered fetch. Attackers can host a page titled KitchenOwl at a URL matching /recipe/<id>. The follow-up requests.get() call can then be redirected or DNS-rebound to loopback, private-network, or cloud-metadata addresses, exposing internal services.
Published: 2026-10-19T13:55:07.523Z
Updated: 2026-10-19T18:12:44.619Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.