Skip to content
Heist/ feed
Back to feed
Medium

imgproxy is vulnerable to SSRF against 0.0.0.0

Type: advisorySources: OSV

imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false. This can expose services on the local host. This vulnerability is fixed in 3.27.2.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2025-24354
Confirmed fixed CVEs
Not specified
Updated in this feed
8 Nov 2026, 03:17 UTC · Revision 1

Source evidence

imgproxy is vulnerable to SSRF against 0.0.0.0

core-osv · Original source

Published 27 Jan 2025, 17:23 UTC

imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false. This can expose services on the local host. This vulnerability is fixed in 3.27.2.

osv:CVE-2025-24354
Complete source record
{
  "id": "5ee722121db34e59486b6cb20f061819739e80791cb34df5a00469bfe6a3a51e",
  "url": "https://osv.dev/vulnerability/CVE-2025-24354",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "imgproxy is vulnerable to SSRF against 0.0.0.0",
    "summary": "imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false. This can expose services on the local host. This vulnerability is fixed in 3.27.2.",
    "evidence": "osv:CVE-2025-24354",
    "products": [],
    "severity": "medium",
    "structured": {
      "id": "CVE-2025-24354",
      "aliases": [
        "CVE-2025-24354",
        "GHSA-j2hp-6m75-v4j4",
        "GO-2025-3422"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/imgproxy/imgproxy",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "d7731dc3860e3dec5e8f822d0b4c3488b2c21dd0"
                },
                {
                  "fixed": "3d4fed6842aa8930ec224d0ad75b0079b858e081"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "3.27.2"
                      }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StringRangeExpression"
                  },
                  {
                    "range": [
                      {
                        "fixed": "3d4fed6842aa8930ec224d0ad75b0079b858e081"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v3.27.1",
            "v3.27.0",
            "v3.26.1",
            "v3.26.0",
            "v3.25.0",
            "v3.24.1",
            "v3.24.0",
            "v3.23.0",
            "v3.22.0",
            "v3.21.0",
            "v3.20.0",
            "v3.19.0",
            "v3.18.2",
            "v3.18.1",
            "v3.18.0",
            "v3.17.0",
            "v3.16.1",
            "v3.16.0",
            "v3.15.0",
            "v3.14.0",
            "v3.13.2",
            "v3.13.1",
            "v3.13.0",
            "v3.12.0",
            "v3.11.0",
            "v3.10.0",
            "v3.9.0",
            "v3.8.0",
            "v3.7.2",
            "v3.7.1",
            "v3.7.0",
            "v3.6.0",
            "v3.5.1",
            "v3.5.0",
            "v3.4.0",
            "v3.3.3",
            "v3.3.2",
            "v3.3.1",
            "v3.3.0",
            "v3.2.2",
            "v3.2.1",
            "v3.2.0",
            "v3.1.3",
            "v3.1.2",
            "v3.1.1",
            "v3.1.0",
            "v3.0.0",
            "v3.0.0.beta2",
            "v2.17.0",
            "v2.16.7",
            "v2.16.6",
            "v2.16.5",
            "v2.16.4",
            "v2.16.3",
            "v2.16.2",
            "v2.16.1",
            "v2.16.0",
            "v2.15.0",
            "v2.14.1",
            "v2.14.0",
            "v2.13.1",
            "v2.13.0",
            "v2.12.0",
            "v2.11.0",
            "v2.10.1",
            "v2.10.0",
            "v2.9.0",
            "v2.8.2",
            "v2.8.1",
            "v2.8.0",
            "v2.7.0",
            "v2.6.2",
            "v2.6.1",
            "v2.6.0",
            "v2.5.0",
            "v2.4.1",
            "v2.4.0",
            "v2.3.0",
            "v2.2.13",
            "v2.2.12",
            "v2.2.11",
            "v2.2.10",
            "v2.2.9",
            "v2.2.8",
            "v2.2.7",
            "v2.2.6",
            "v2.2.5",
            "v2.2.4",
            "v2.2.3",
            "v2.2.2",
            "v2.2.2.beta4",
            "v2.2.2.beta3",
            "v2.2.2.beta2",
            "v2.2.2.beta1",
            "v2.2.1",
            "v2.2.0",
            "v2.1.5",
            "v2.2.0.rc1",
            "v2.1.4",
            "v2.1.3",
            "v2.1.2",
            "v2.1.1",
            "v2.1.0",
            "v2.1.0.rc2",
            "v2.1.0.rc1",
            "v2.1.0.beta2",
            "v2.1.0.beta1",
            "v2.0.1",
            "v2.0.0",
            "v1.1.8",
            "v1.1.7",
            "v1.1.6",
            "v1.1.5.1",
            "v1.1.5",
            "v1.1.4",
            "v1.1.3",
            "v1.1.2",
            "v1.1.1",
            "v1.1",
            "v1.0"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-24354.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:53.514177257Z",
      "provider": "osv",
      "references": [
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/24xxx/CVE-2025-24354.json",
        "https://github.com/imgproxy/imgproxy/security/advisories/GHSA-j2hp-6m75-v4j4",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-24354",
        "https://github.com/imgproxy/imgproxy/commit/3d4fed6842aa8930ec224d0ad75b0079b858e081"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-918"
        ],
        "cna_assigner": "GitHub_M",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/24xxx/CVE-2025-24354.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2025-24354",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 522137,
  "published_at": "2025-01-27T17:23:58.303+00:00"
}