Imgurl · Imgurl · CVE-2022-29305
**Name of the Vulnerable Software and Affected Versions**
imgurl version 2.31
**Description**
The issue is related to a Blind SQL injection vulnerability. This vulnerability can be exploited via the "/upload/localhost" API endpoint.
**Recommendations**
For imgurl version 2.31, consider restricting access to the "/upload/localhost" endpoint until a patch is available. As a temporary workaround, avoid using parameters that could lead to SQL injection in this endpoint. At the moment, there is no information about a newer version that contains a fix for this vulnerability.