Imgproxy

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-30019 Go MEDIUM POC PATCH This Month

imgproxy <=3.14.0 is vulnerable to Server-Side Request Forgery (SSRF) due to a lack of sanitization of the imageURL parameter. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SSRF Imgproxy

NVD GitHub

CVSS 3.1

5.3

EPSS

2.2%

CVE-2023-1496 Go MEDIUM POC PATCH This Month

Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Imgproxy

NVD GitHub

CVSS 3.1

5.4

EPSS

1.6%

CVE-2023-30019 Go

EPSS 2% CVSS 5.3

MEDIUM POC PATCH This Month

SSRF Imgproxy

NVD GitHub

CVE-2023-1496 Go

EPSS 2% CVSS 5.4

MEDIUM POC PATCH This Month

XSS Imgproxy

NVD GitHub