.. / CVE-2023-1496

• XSS
• Nuclei
• Web

Exploit for Imgproxy < 3.14.0 - Cross-site Scripting (XSS) (CVE-2023-1496)

Description:

Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0.

Nuclei Template

View the template here CVE-2023-1496.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-1496.yaml

References: