CVE-2024-27620

The web proxy Ladder (v0.0.1 through v0.0.21) is vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is a failure to apply sufficient default restrictions on destination addresses, which allows a remote attacker to make GET requests to internal resources via a crafted API request....

CVE-2024-27620

An issue in Ladder v.0.0.1 thru v.0.0.21 allows a remote attacker to obtain sensitive information via a crafted request to the API...