CVE-2023-25341

A Directory Traversal vulnerability in ladle dev server 2.5.1 and earlier allows an attacker on the same network to read files accessible to the user via GET requests...

Malicious code in test-mlw2-ladle-burst (npm)

The package test-mlw2-ladle-burst was found to contain malicious code...

Malicious code in test-mlw2-ladle-dumka (npm)

The package test-mlw2-ladle-dumka was found to contain malicious code...

MAL-2025-35643 Malicious code in test-mlw2-ladle-dumka (npm)

The package test-mlw2-ladle-dumka was found to contain malicious code...

MAL-2025-35642 Malicious code in test-mlw2-ladle-burst (npm)

The package test-mlw2-ladle-burst was found to contain malicious code...

CVE-2023-25341

A Directory Traversal vulnerability in ladle dev server 2.5.1 and earlier allows an attacker on the same network to read files accessible to the user via GET requests...

Ladle 安全漏洞

Ladle is a separate package and command from Ladle, Inc. A security vulnerability exists in Ladle 2.5.1 and prior versions that originated from allowing an attacker to read user-accessible files via a GET request...

CVE-2023-25341

A Directory Traversal vulnerability in ladle dev server 2.5.1 and earlier allows an attacker on the same network to read files accessible to the user via GET requests...

CVE-2023-25341

A Directory Traversal vulnerability in ladle dev server 2.5.1 and earlier allows an attacker on the same network to read files accessible to the user via GET requests...

PT-2024-12054 · Unknown · Ladle Dev Server

Name of the Vulnerable Software and Affected Versions: Ladle Dev Server versions 2.5.1 and earlier Description: A Directory Traversal issue allows an attacker on the same network to read files accessible to the user via GET requests. This can be exploited by sending requests to specific API...

CVE-2023-25341

A Directory Traversal vulnerability exists in ladle dev server versions 2.5.1 and earlier . This flaw allows an attacker located on the same network to read files accessible to the user by sending GET requests to specific API endpoints. The impact involves unauthorized access to sensitive local f...

CVE-2023-25341: Improper Limitation of a Pathname to a Restricted Directory

A Directory Traversal vulnerability in ladle dev server 2.5.1 and earlier allows an attacker on the same network to read files accessible to the user via GET requests...

ladle address change can lead to fail other functionalities

Lines of code Vulnerability details Impact for ongoing auctions, it will not return any join. Proof of Concept Tools Used Manual Analysis Recommended Mitigation Steps add checks or set proper mechanism before change ladle address --- The text was updated successfully, but these errors were...

Violation of implicit constraints in batched operations may break protocol assumptions

Handle 0xRajeev Vulnerability details Impact The Ladle batching of operations is a complex task as noted by the project lead which has implicit constraints on what operations can be bundled together in a batch, which operations can/have-to appear how many times and in what order/sequence etc. Som...

Potential griefing with DoS by front-running vault creation with same vaultID

Handle 0xRajeev Vulnerability details Impact The vaultID for a new vault being built is required to be specified by the user building a vault via the build function instead of being assigned by the Cauldron/protocol. An attacker can observe a build as part of a batch transaction in the mempool,...