Get real-time updates on Telegram
Verified
osv:BIT-MINIO-2025-31489: minio (exact versions not specified)
MinIO performs incomplete signature validation for unsigned-trailer uploads. Fixed version: 2023.12.23.
Affected technology
minio · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
And bucket name this user might have access to - and an access-key with a WRITE permissions is necessary.
- Product
- minio
- KEV
- no
Provenance
- OSV.dev · Source record · observed 2026-10-08 08:57:13.774521+00:00 UTC
Stable permalink: https://cybercodered.org/item/adv-osv-bit-minio-2025-31489.html