CVE-2023-30019

imgproxy =3.14.0 is vulnerable to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter...

CVE-2023-30019

Imgproxy

CVE-2023-30019

imgproxy =3.14.0 is vulnerable to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter...

imgproxy 代码问题漏洞

imgproxy is imgproxy individual developer's fast and secure standalone server for tweaking and converting remote images. A security vulnerability exists in imgproxy version 3.14.0 and earlier versions, which stems from a lack of cleanup of the imageURL parameter...

CVE-2023-30019: Server-Side Request Forgery (SSRF)

imgproxy =3.14.0 is vulnerable to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter...

PT-2023-22513 · Imgproxy · Imgproxy

Name of the Vulnerable Software and Affected Versions: imgproxy versions 3.14.0 and earlier imgproxy prior to version 3.15.0 Description: The issue is related to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter. This allows for potential exploitation...

CVE-2023-30019

imgproxy =3.14.0 is vulnerable to Server-Side Request Forgery SSRF due to a lack of sanitization of the imageURL parameter...

Cross-site Scripting (XSS)

github.com/imgproxy/imgproxy is vulnerable to Cross-site Scripting XSS. The vulnerability exists because the Satitize function in svg.go does not sanitize the use tags in SVG files, which allows an attacker to inject and execute malicious JavaScript...

imgproxy Cross-site Scripting vulnerability

Cross-site Scripting XSS - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0...

GHSA-CH9G-X9J7-RCGP imgproxy Cross-site Scripting vulnerability

Cross-site Scripting XSS - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0...

CVE-2023-1496

Cross-site Scripting XSS - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0...

CVE-2023-1496 Cross-site Scripting (XSS) - Reflected in imgproxy/imgproxy

Cross-site Scripting XSS - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0...

imgproxy 跨站脚本漏洞

imgproxy is imgproxy individual developer's fast and secure standalone server for tweaking and converting remote mirrors. A cross-site scripting vulnerability exists in imgproxy versions prior to 3.14.0, which stems from the presence of reflected cross-site scripting XSS...

CVE-2023-1496

CVE-2023-1496 affects the Imgproxy project prior to version 3.14.0, where a reflected Cross-site Scripting (XSS) vulnerability exists in imgproxy/imgproxy. The root cause is reflected XSS in the web interface, allowing an attacker to execute arbitrary JavaScript in the victim’s browser. Reported ...

CVE-2023-1496 Cross-site Scripting (XSS) - Reflected in imgproxy/imgproxy

Cross-site Scripting XSS - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0...

CVE-2023-1496

Cross-site Scripting XSS - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0...

CVE-2023-1496: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0...

CVE-2023-1496 Cross-site Scripting (XSS) - Reflected in imgproxy/imgproxy

Cross-site Scripting XSS - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0...

SVG Sanitization Bypass - XSS

Description In imgproxy application, we bypassed the svg sanitization function. In this way, attacker can craft malicious svg file and run javascript on the application. Proof of Concept Here is the content of the malicious svg file. After that you can call this svg file like below...