CVE-2025-24354
imgproxy is vulnerable to SSRF against 0.0.0.0
Résumé
imgproxy is vulnerable to SSRF against 0.0.0.0
Description d'origine
La description telle que publiée par la source (souvent en anglais).
imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false. This can expose services on the local host. This vulnerability is fixed in 3.27.2.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com