WID-SEC-W-2023-2261

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

MinIO: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

view advisory published 2023-09-04

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MinIO ausnutzen, um Informationen offenzulegen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2023-28434UShigh8.8OT criticalKEV
Minio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requests to bypass metadata bucket name checking and put an obje…
CVE-2023-28432UShigh7.5OT criticalKEV
Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all env…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan