logo

Database

Server-side request forgery (SSRF) In github.com/imgproxy/imgproxy/v2

Description

imgproxy is vulnerable to Server-Side Request Forgery in github.com/imgproxy/imgproxy

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2023-300192. NVD-2023-300193. OSV-2023-300194. OSV-GO-2023-17615. GHSA-9x7h-ggc3-xg476. GCVE-2023-30019

References

1. https://github.com/imgproxy/imgproxy/commit/1a9768a2c682e88820064aa3d9a05ea234ff3cc42. https://breakandpray.com/cve-2023-30019-ssrf-in-imgproxy3. https://github.com/imgproxy/imgproxy/blob/ee9e8f0cb101ec22318caffd552a23cc0548d5ce/imagedata/download.go#L1424. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30019.yaml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.

FLAT-WEKCX – Vulnerability | Fluid Attacks Database