Ben Aubin

1 exploit Active since Jan 2025
CVE-2025-24354 WRITEUP MEDIUM WRITEUP
imgproxy < 3.27.2 - Server-Side Request Forgery via 0.0.0.0 Address Handling
imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false. This can expose services on the local host. This vulnerability is fixed in 3.27.2.
CVSS 5.3