Vulnerability in N/a

CVE-2023-30019

imgproxy <=3.14.0 is vulnerable to Server-Side Request Forgery (SSRF) due to a lack of sanitization of the imageURL parameter.

EPSS: 0.706 (98.7th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

j4k0m/godkiller

References

Frequently asked questions

What is CVE-2023-30019?: CVE-2023-30019 is a vulnerability in N/a. Published 2023-05-08.
Is CVE-2023-30019 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.