CVE-2023-30019

Published May 8th, 2023

View on NVD ↗

CVSS v3

5.3

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

imgproxy <=3.14.0 is vulnerable to Server-Side Request Forgery (SSRF) due to a lack of sanitization of the imageURL parameter.

imgproxy/imgproxy

Fast and secure standalone server for resizing, processing, and converting images on the fly

GitHub

10.9K