CVE-2022-35919: Improper Limitation of a Pathname to a Restricted Directory

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. In affected versions all 'admin' users authorized for admin:ServerUpdate can selectively trigger an error that in response, returns the content of the path requested. Any normal OS system would allow...

CVE-2022-35919

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. In affected versions all 'admin' users authorized for "admin:ServerUpdate" can selectively trigger an error that in response, returns the content of the path requested. Any normal OS system would all...