imgproxy Cross-site Scripting vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-1496 · ADVISORY
• imgproxy/imgproxy commit 62f8d08 · WEB
• imgproxy/imgproxy · PACKAGE
• huntr.dev/bounties/de603972-935a-401a-96fb-17ddadd282b2 · WEB
• GitHub Advisory GHSA-ch9g-x9j7-rcgp · ADVISORY

Lỗ hổng khác của github.com/imgproxy/imgproxy

• GHSA-hff9-5pqw-6w9fNGHIÊM TRỌNG 9.8imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution
• CVE-2025-24354TRUNG BÌNH 5.3imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LO…
• CVE-2023-30019TRUNG BÌNH 5.3imgproxy <=3.14.0 is vulnerable to Server-Side Request Forgery (SSRF) due to a lack of sanitization of the imageURL parameter.