← Database

CVE-2025-24354

MEDIUM CVSS: 5.3 Published: 2025-01-27 Modified: 2026-06-17

Description

imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false. This can expose services on the local host. This vulnerability is fixed in 3.27.2.

Affected Platforms

Unknown

Weakness Type

CWE-918

References