logo

Database

Reflected cross-site scripting (XSS) In github.com/imgproxy/imgproxy

Description

imgproxy Cross-site Scripting vulnerability in github.com/imgproxy/imgproxy

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2023-14962. NVD-2023-14963. OSV-GO-2023-16514. OSV-2023-14965. GHSA-ch9g-x9j7-rcgp6. GCVE-2023-1496

References

1. https://github.com/imgproxy/imgproxy/commit/62f8d08a93d301285dcd1dabcc7ba10c6c65b6892. https://huntr.dev/bounties/de603972-935a-401a-96fb-17ddadd282b23. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1496.yaml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.