Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2023-30019

Disclosure Date: May 08, 2023 (last updated October 08, 2023)
imgproxy <=3.14.0 is vulnerable to Server-Side Request Forgery (SSRF) due to a lack of sanitization of the imageURL parameter.
Attacker Value
Unknown

CVE-2023-1496

Disclosure Date: March 19, 2023 (last updated October 08, 2023)
Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0.