Tandoor Recipes Local File Disclosure Vulnerability

A local file disclosure vulnerability exists in Tandoor Recipes versions through 1.5.23. The issue arises from the external storage feature, which allows users to enumerate and access the content of files on the server. This vulnerability can be exploited to read files from various directories, including sensitive locations like '/etc' and user home directories.

Impact

Exploitation of this vulnerability allows for unauthorized reading of any file on the server, including sensitive system files and user data.

Reproduction

To reproduce this vulnerability, create a new storage backend in Tandoor Recipes. Once the backend is set up, files from any directory can be accessed through the application. For example, files in the '/etc' directory can be enumerated and their contents retrieved using the Tandoor API.

Remediation

Users can update to Tandoor Recipes version 1.5.28 or later to address this vulnerability.