CVE-2025-53833 Scanner
Targets the Markdown rendering endpoint in LaRecipe, allowing an attacker to inject malicious template expressions and achieve remote code execution.
Used 2.3k times · 3.4k assets checked · domain, subdomain, ipv4
CVE
CVE-2025-53833
10.0
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
LaRecipe is an application that allows users to create documentation with Markdown inside a Laravel app. Versions prior to 2.8.1 are vulnerable to Server-Side Template Injection (SSTI), which could potentially lead to Remote Code Execution (RCE) in vulnerable configurations. Attackers could execute arbitrary commands on the server, access sensitive environment variables, and/or escalate access depending on server configuration. Users are strongly advised to upgrade to version v2.8.1 or later to receive a patch.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
larecipe
Updated Oct 24, 2026View on NVD →
S4E scanner
CVE history: larecipe
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →