Skip to content
OpenAdvisories
Medium · 4.3 CVE-2023-33955 EUVD-2023-1573GHSA-jv3f-7m33-qp65

Minio console object names with RIGHT-TO-LEFT OVERRIDE unicode character can be exploited

Published May 30, 2023 · Updated Jan 10, 2025 · Assigned by GitHub_M

Description

Minio Console is the UI for MinIO Object Storage. Unicode RIGHT-TO-LEFT OVERRIDE characters can be used to mask the original filename. This issue has been patched in version 0.28.0.

Affected products

VendorProductAffectedFixed
minio console < 0.28.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/minio/console < 0.28.0 0.28.0 GHSA-jv3f-7m33-qp65

References