CVE-2023-30019

Imgproxy

CVE-2023-1496

CVE-2023-1496 affects the Imgproxy project prior to version 3.14.0, where a reflected Cross-site Scripting (XSS) vulnerability exists in imgproxy/imgproxy. The root cause is reflected XSS in the web interface, allowing an attacker to execute arbitrary JavaScript in the victim’s browser. Reported ...