Get real-time updates on Telegram
Verified
osv:BIT-MINIO-2023-28434: minio (exact versions not specified)
MinIO is vulnerable to privilege escalation on Linux/MacOS. Fixed version: 2023.03.20.
Affected technology
minio · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
An attacker can use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `PostPolicyBucket`.
- Product
- minio
- KEV
- no
Provenance
- OSV.dev · Source record · observed 2026-10-08 08:57:13.774521+00:00 UTC
Stable permalink: https://cybercodered.org/item/adv-osv-bit-minio-2023-28434.html