Description
imgproxy allows an unauthenticated attacker to send arbitrary requests to perform lookups on the internal network which is otherwise not accessible externally. An attacker may use this feature to perform SSRF (server-side request forgery) attacks on the server.
Remediation
Upgrade to the latest version of imgproxy
References
Related Vulnerabilities
MySQL CVE-2021-2174 Vulnerability (CVE-2021-2174)
Moodle Improper Input Validation Vulnerability (CVE-2012-1168)
IBM RTC Incorrect Authorization Vulnerability (CVE-2017-1700)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-2643)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2358)