CVE-2023-28434 MinIO MinIO
MinIO contains a security feature bypass vulnerability that allows an attacker to use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `PostPolicyBucket` to conduct privilege escalation. To carry out this attack, the attacker requires credentials with…
- CVSS
- not scored
On CISA’s exploited list
MinIO Security Feature Bypass Vulnerability
- Added
- 2023-09-19
- Federal patch deadline
- 2023-10-10
- Ransomware use
- not known