CVE-2025-57396

Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation. This is due to the rework of the API, which resulted in the User Profile API Endpoint containing two boolean values indicating whether a user is staff or administrative. Consequently, any user can escala...

CVE-2025-57396

The open-source application Tandoor Recipes version 2.0.0-alpha-1 is vulnerable to privilege escalation due to a flaw in the User Profile API Endpoint . The root cause is a rework of the API that left the endpoint containing two boolean values indicating whether a user holds staff or administrati...