CloudMap 漏洞情报库

中危CVE-2025-243542025/01/27

Imgproxy < 3.27.2 - Server-Side Request Forgery (SSRF)

imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false. This can expose services on the local host. This vulnerability is fixed in 3.27.2.

ImgproxyPoC 已收录

CVSS5.3

低危2024/06/08

Imgproxy Unauthorized Access

imgproxy is a fast and secure standalone server for resizing, processing, and converting images.

ImgproxyPoC 已收录

CVSS7.5

中危CVE-2023-300192023/05/08

Imgproxy <= 3.14.0 - Server-side request forgery (SSRF)

imgproxy <=3.14.0 is vulnerable to Server-Side Request Forgery (SSRF) due to a lack of sanitization of the imageURL parameter.

ImgproxyPoC 已收录

CVSS5.3EPSS 56.2%

中危CVE-2023-14962023/03/20

Imgproxy < 3.14.0 - Cross-site Scripting (XSS)

Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0.

ImgproxyPoC 已收录

CVSS5.4EPSS 15.4%

Imgproxy

关联漏洞

Imgproxy < 3.27.2 - Server-Side Request Forgery (SSRF)

Imgproxy Unauthorized Access

Imgproxy <= 3.14.0 - Server-side request forgery (SSRF)

Imgproxy < 3.14.0 - Cross-site Scripting (XSS)