CVE-2023-30019

Name of the Vulnerable Software and Affected Versions imgproxy versions 3.14.0 and earlier imgproxy prior to version 3.15.0

Description The issue is related to Server-Side Request Forgery (SSRF) due to a lack of sanitization of the imageURL parameter. This allows for potential exploitation.

Recommendations For imgproxy versions 3.14.0 and earlier, update to version 3.15.0 or later to resolve the issue. For imgproxy prior to version 3.15.0, update to version 3.15.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the imageURL parameter to minimize the risk of exploitation.