Evilmartians

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Evilmartians records in CISA KEV

No Evilmartians vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2023-01415 CVE-2023-1496 · GHSA-ch9g-x9j7-rcgp

MEDIUM 64

Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01585 Published 2023-03-19 Fixed in 3.14.0 CWE-79

TI-2023-14110 CVE-2023-30019 · GHSA-9x7h-ggc3-xg47

LOW 34

imgproxy <=3.14.0 is vulnerable to Server-Side Request Forgery (SSRF) due to a lack of sanitization of the imageURL parameter.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02214 Published 2023-05-08 Fixed in 3.15.0 CWE-918