coldbraid

CVE-2023-28434 MinIO MinIO

MinIO contains a security feature bypass vulnerability that allows an attacker to use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `PostPolicyBucket` to conduct privilege escalation. To carry out this attack, the attacker requires credentials with…

CVSS
not scored

CWE-269

On CISA’s exploited list

MinIO Security Feature Bypass Vulnerability

Added
2023-09-19
Federal patch deadline
2023-10-10
Ransomware use
not known