The flaw exists in the Pestle importer of Tandoor Recipes, where a crafted image URL in a JSON import can be used to trigger an unfiltered calls to requests.get. Authenticated users with low privileges can force the server to send GET requests to arbitrary internal or external hosts, bypassing the application’s hardened SSRF filter. This allows attackers to reach internal‑only endpoints, identify running services, and exfiltrate responses through the stored recipe image, exposing sensitive internal data and potentially credentials.

Tandoor Recipes (recipes) before version 2.7.0 are affected. No further version qualifiers are listed beyond the pre‑2.7.0 boundary.

The vulnerability scores a CVSS of 6.3, indicating moderate impact, with no EPSS value reported and it is not listed in the CISA KEV catalog. Attackers need only authenticated access with low privileges and must supply a malicious import file; the vulnerability then allows arbitrary outbound GET requests, which can be used for reconnaissance or exploitation of internal services. Given the lack of public exploitation, it remains a moderate to high risk until patched.