CVE-2024-36107 vulnerabilities

Vulnerabilities for packages: minio...

CVE-2024-36107 vulnerabilities

Vulnerabilities for packages: minio...

CVE-2024-36107

MinIO (MinIO object storage) contains a information-disclosure vulnerability (CVE-2024-36107) where anonymous GET requests using If-Modified-Since/If-Unmodified-Since can reveal object existence and metadata (Last-Modified, Etag, x-amz-version-id, Expires, Cache-Control) without proper validation...

CVE-2024-36107 Information disclosure in minio

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. If-Modified-Since and If-Unmodified-Since headers when used with anonymous requests by sending a random object name requests can be used to determine if an object exists or not on the server on a...