CVE | CVE-2023-1496 |
CVE Title | |
Published Date | 2023-03-19T17:15Z |
Modified Date | 2023-03-24T01:52Z |
CWE Type | CWE-79 |
CVSS 3.x | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Description | Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0. |
References | |
By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites. | |
Reference URL | https://huntr.dev/bounties/de603972-935a-401a-96fb-17ddadd282b2 |
Reference Description | CONFIRM https://huntr.dev/bounties/de603972-935a-401a-96fb-17ddadd282b2 |
Reference URL | https://github.com/imgproxy/imgproxy/commit/62f8d08a93d301285dcd1dabcc7ba10c6c65b689 |
Reference Description | MISC https://github.com/imgproxy/imgproxy/commit/62f8d08a93d301285dcd1dabcc7ba10c6c65b689 |
Tags | Exploit Patch Third Party Advisory |
Sources | NIST MITRE |