Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:29598
HistoryMar 09, 2021 - 3:42 a.m.

Authorization Bypass

2021-03-0903:42:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.001 Low

EPSS

Percentile

43.3%

github.com/minio/minio is vulnerable to authorization bypass. PostPolicyHandler did not verify user policies and allows an attacker to bypass the readOnly policy by creating a temporary mc share upload URL.

0.001 Low

EPSS

Percentile

43.3%