MinIO 2

Organization

CVE-2023-28434: MinIO Security Feature Bypass Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Sep 19, 2023

MinIO contains a security feature bypass vulnerability that allows an attacker to use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `PostPolicyBucket` to conduct privilege escalation. To carry...

Vulnerabilities & Patching

CVE-2023-28432: MinIO Information Disclosure Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Apr 21, 2023

MinIO contains a vulnerability in a cluster deployment where MinIO returns all environment variables, which allows for information disclosure.

Vulnerabilities & Patching