CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

NVD•added 2021/03/08 7:15 p.m.•32 views

CVE-2021-21362

MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage service. In MinIO before version RELEASE.2021-03-04T00-53-13Z it is possible to bypass a readOnly policy by creating a temporary 'mc share upload' URL. Everyone is impacted who us...

7.7CVSS0.01321EPSS

Exploits1References4

OSV•added 2021/03/08 7:15 p.m.•22 views

CVE-2021-21362

6.5CVSS6.6AI score

Exploits0References4

Cvelist•added 2021/03/08 6:40 p.m.•23 views

CVE-2021-21362 Bypassing readOnly policy by creating a temporary 'mc share upload' URL

7.7CVSS7.6AI score0.01321EPSS

Exploits1References4

CVE•added 2021/03/08 6:40 p.m.•180 views

CVE-2021-21362

MinIO vuln CVE-2021-21362 affects MinIO before RELEASE.2021-03-04T00-53-13Z. A remote attacker could bypass a readOnly policy by creating a temporary 'mc share upload' URL, enabling modification of a resource in multi-user deployments. The issue is fixed in RELEASE.2021-03-04T00-53-13Z. Workaroun...

7.7CVSS6.6AI score0.01321EPSS

Exploits1References4Affected Software1