Lucene search
+L

2 matches found

Veracode
Veracode
•added 2023/05/11 4:24 a.m.•35 views

Server-side Request Forgery (SSRF)

github.com/imgproxy/imgproxy is vulnerable to Server-Side Request Forgery SSRF. The vulnerability exists due to unsafe sanitation of the imageURL parameter, which allows an attacker to cause server-side request forgery...

5.3CVSS6.4AI score0.02214EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/19 12:00 a.m.•2 views

CVE-2023-1496: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0...

6.5CVSS5.8AI score0.01585EPSS
SaveExploits1References2
Rows per page
Query Builder