Imgurl Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Imgurl Project records in CISA KEV

No Imgurl Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2022-11823 CVE-2022-29305 · GHSA-rrjv-34p5-4c7r

LOW 37

imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00924 Published 2022-05-24 No fix listed CWE-89

TI-2021-16283 CVE-2021-38713 · GHSA-f2rp-j8hv-g5gx

LOW 25

imgURL 2.31 allows XSS via an X-Forwarded-For HTTP header.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00527 Published 2021-08-16 No fix listed CWE-79