漏洞描述
Tandoor Recipes < 1.5.24 has a Jinja2 SSTI vulnerability that allows command execution via recipe steps.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
github.comhttps://github.com/TandoorRecipes/recipes/blob/4f9bff20c858180d0f7376de443a9fe4c123a50c/cookbook/helper/template_helper.py#L95↗github.comhttps://github.com/TandoorRecipes/recipes/commit/e6087d5129cc9d0c24278948872377e66c2a2c20↗github.comhttps://github.com/TandoorRecipes/recipes/security/advisories/GHSA-r6rj-h75w-vj8v↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2025-23211↗