CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-03-22
MinIO Object Storage Privilege Escalation & Arbitrary Bucket Write Vulnerability (CVE-2023-28434)
[Affected Scope] MinIO Multi-Cloud Object Storage deployments prior to RELEASE.2023-03-20T20-16-18Z
[Impact] An attacker can bypass metadata bucket name validation to upload arbitrary objects into any bucket, potentially leading to data tampering or system compromise
[Mitigation] Immediately upgrade MinIO to RELEASE.2023-03-20T20-16-18Z or later, or disable the browser Console API as a temporary workaround