imgproxy Cross-site Scripting vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-1496 · ADVISORY
• imgproxy/imgproxy commit 62f8d08 · WEB
• imgproxy/imgproxy · PACKAGE
• huntr.dev/bounties/de603972-935a-401a-96fb-17ddadd282b2 · WEB
• GitHub Advisory GHSA-ch9g-x9j7-rcgp · ADVISORY

github.com/imgproxy/imgproxy のその他の脆弱性

• GHSA-hff9-5pqw-6w9f緊急 9.8imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution
• CVE-2025-24354中 5.3imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LO…
• CVE-2023-30019中 5.3imgproxy <=3.14.0 is vulnerable to Server-Side Request Forgery (SSRF) due to a lack of sanitization of the imageURL parameter.