logo

Database

Server-side request forgery (SSRF) In github.com/imgproxy/imgproxy/v2

Description

imgproxy is vulnerable to SSRF against 0.0.0.0 in github.com/imgproxy/imgproxy

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2025-243542. NVD-2025-243543. OSV-2025-243544. OSV-GO-2025-34225. GHSA-j2hp-6m75-v4j46. GCVE-2025-24354

References

1. https://github.com/imgproxy/imgproxy/security/advisories/GHSA-j2hp-6m75-v4j42. https://github.com/imgproxy/imgproxy/commit/3d4fed6842aa8930ec224d0ad75b0079b858e0813. https://vulncheck.com/cve/CVE-2025-243544. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24354.yaml5. https://github.com/Admin9961/CVE-2025-24354-PoC

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.

FLAT-6YELD – Vulnerability | Fluid Attacks Database