Lucene search
CVE-2023-28434
Prior to RELEASE.2023-03-20T20-16-18Z, Minio allows bypassing metadata bucket name check and putting objects into any bucket using crafted requests. Requires 'arn:aws:s3:::*' permission and enabled Console API access. Patched in RELEASE.2023-03-20T20-16-18Z. Workaround: enable browser API access, turn off 'MINIO_BROWSER=off'
Show more
| Reporter | Title | Published | Views | Family All 23 |
|---|---|---|---|---|
 | CGA-28M3-FGWH-2Q2W | 6 Jun 202412:17 | – | osv |
| CVE-2023-28434 | 22 Mar 202321:15 | – | osv |
| BIT-minio-2023-28434 | 6 Mar 202410:56 | – | osv |
| Privilege Escalation on Linux/MacOS | 5 Sep 202315:45 | – | osv |
 | Privilege Escalation | 28 Mar 202307:02 | – | veracode |
 | CVE-2023-28434 vulnerabilities | 22 Mar 202321:15 | – | cgr |
 | CVE-2023-28434 | 22 Mar 202321:15 | – | cve |
 | CVE-2023-28434 | 22 Mar 202321:15 | – | alpinelinux |
 | CISA Adds One Known Exploited Vulnerability to Catalog | 19 Sep 202312:00 | – | cisa |
 | CVE-2023-28434 | 22 Mar 202300:00 | – | attackerkb |
10
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo22 Mar 2023 21:15Current
8.7High risk
Vulners AI Score8.7
CVSS38.8
EPSS0.83779