Description
imgproxy <=3.14.0 is vulnerable to Server-Side Request Forgery (SSRF) due to a lack of sanitization of the imageURL parameter.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Imgproxy <= 3.14.0 - Server-side request forgery (SSRF) http/cves/2023/CVE-2023-30019.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/imgproxy/imgproxy | all versions | — | GO-2023-1761 |
| Go | github.com/imgproxy/imgproxy/v2 | all versions | — | GO-2023-1761 |
| Go | github.com/imgproxy/imgproxy/v3 | < 3.15.0 | 3.15.0 | GHSA-9x7h-ggc3-xg47 |