Skip to content
OpenAdvisories

Vendor

minio

32 known vulnerabilities.

Products

minio 28 console 2 minio-java 1 operator 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2023-28434 Exploited Public exploit

    MinIO is vulnerable to privilege escalation on Linux/MacOS

    Minio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `PostPolicyBucket`. To carry out this attac…

    minio minio github.com/minio/minio Go
    KEV Sep 19, 2023
  • High 7.5
    CVE-2023-28432 Exploited Public exploit EPSS 84%

    Minio Information Disclosure in Cluster Deployment

    Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including `MINIO_SECRET_KEY` and `MINIO_ROOT_PASSWORD`, res…

    minio minio
    KEV Apr 21, 2023