CVE-2023-25812

Minio is a Multi-Cloud Object Storage framework. Affected versions do not correctly honor a "Deny" policy on ByPassGoverance. Ideally, minio should return "Access Denied" to all users attempting to DELETE a versionId with the special header "X-Amz-Bypass-Governance-Retention: true". However, this...