Description (CNA)
imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false. This can expose services on the local host. This vulnerability is fixed in 3.27.2.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| imgproxy / imgproxy | affected < 3.27.2 |
CWE
CWE-918
References
- https://github.com/imgproxy/imgproxy/security/advisories/GHSA-j2hp-6m75-v4j4
- https://github.com/imgproxy/imgproxy/commit/3d4fed6842aa8930ec224d0ad75b0079b858e081
ADP enrichment
No English description supplied.
No references supplied.