Question: What is CVE-2025-24354?
Answer: CVE-2025-24354 is a vulnerability classified as medium with a CVSS score of 5.3. It falls under CWE-918 and affects the system as follows: imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false. This can expose services on the local host. This vulnerability is fixed in 3.27.2.