ssrf external service interaction to malicious external source - security issue about imgix-rails HOT 8 CLOSED

Hey there @anwibugc and thanks for bringing this to our attention. I've gone ahead and forwarded this to the relevant team for review and planning out any mitigation steps as deemed necessary.

from imgix-rails.

Hi Team,

Hope you are doing well.

Any update for this?

from imgix-rails.

Hey @anwibugc, I believe the team is actively looking into this. I'll be sure to follow up here with any updates as I receive them.

from imgix-rails.

@luqven , please review this security issue.

from imgix-rails.

Hi @sherwinski @luqven,

Any update for this?

from imgix-rails.

@sherwinski @luqven

Hi Team,

still no tag & assigned to this issue?

Please check once.

from imgix-rails.

@anwibugc let me follow up with the team again.

from imgix-rails.

Hi @anwibugc - can you email [email protected] and reference this thread? We'd like to get more information from you so we can investigate further.

In the meantime, we're going to close this issue because it's not an imgix-rails issue. It's an issue with our Rendering API.

from imgix-rails.