Skip to content

docker compose and readme changes #42

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
robert-doyensec wants to merge 1 commit into
base: main
Choose a base branch
from
Open

docker compose and readme changes #42

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 17 additions & 4 deletions dtale/CVE-2025-0655/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,15 +2,28 @@

This directory contains the deployment config for D-Tale instances vulnerable and fixed to CVE-2025-0655. Instances before version 3.16.1 may allow users to potentially execute commands via Global State Override mechanism.

The key difference between this testbed and the Exposed UI testbed is that this one does not explicitly custom filters, but still allows RCE.

@giacomo-doyensec giacomo-doyensec Jul 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
The key difference between this testbed and the Exposed UI testbed is that this one does not explicitly custom filters, but still allows RCE.
The key difference between this testbed and the Exposed UI testbed is that this one does not explicitly enable custom filters, but still allows RCE.


## Deployment

```sh
docker-compose up vuln
docker-compose up safe
docker-compose up
```

## Vulnerable Service
The `vuln` service runs D-Tale v3.16.0.
The `vuln` service runs D-Tale v3.16.0 and is exposed on port 8081.

To confirm the vulnerability, you need any data to be uploaded and then to send the following request:
```
curl -vk 'host.docker.internal:8081/dtale/update-settings/1?settings=%7B%22enable_custom_filters%22%3Atrue%7D'
```
If the response indicates success, the instance is vulnerable.

## Fixed Service
The `safe` service runs D-Tale v3.17.0.
The `safe` service runs D-Tale v3.17.0 and is exposed on port 8082.

To confirm the vulnerability, you need any data to be uploaded and then to send the following request:
```
curl -vk 'host.docker.internal:8082/dtale/update-settings/1?settings=%7B%22enable_custom_filters%22%3Atrue%7D'
```
If the response indicates an error changing the setting, the instance is not vulnerable.
8 changes: 4 additions & 4 deletions dtale/CVE-2025-0655/docker-compose.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ services:
build:
context: imgdata/
dockerfile: Vulnerable.Dockerfile
expose:
- "40000"
ports:
- "8081:40000"
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:40000"]
interval: 30s
Expand All @@ -14,8 +14,8 @@ services:
build:
context: imgdata/
dockerfile: Fixed.Dockerfile
expose:
- "40000"
ports:
- "8082:40000"
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:40000"]
interval: 30s
Expand Down