Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2025-24354 PoC — imgproxy is vulnerable to SSRF against 0.0.0.0

Source
https://github.com/Admin9961/CVE-2025-24354-PoC
Associated Vulnerability
Title:imgproxy is vulnerable to SSRF against 0.0.0.0 (CVE-2025-24354)
Description:imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false. This can expose services on the local host. This vulnerability is fixed in 3.27.2.
Description
SSRF in ImgProxy (only for educational purpose)
File Snapshot

 [4.0K]  /data/pocs/caaf9d096f1bb712eb254099c5541298879b32d9
└── [5.7K]  CVE-2025-24354.py

0 directories, 1 file
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →