CVE-2025-57396
Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation. This is due to the rework of the API, which resulted in the User Profile API Endpoint containing two boolean values indicating whether a user is staff or administrative. Consequently, any user can escalate their privileges to the highest level.
Vendor
Product
CWE
Yayın Tarihi
2025-09-19 20:15:40
Güncelleme
2025-10-03 16:58:21
Source Identifier
cve@mitre.org
KEV Date Added
-