minio kayıtları
minio üreticisine ait 25 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 2 · %8
- Silahlaştırılmış
- 2 · %8
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %24
- Yayından KEV’e ortanca
- 106 gün
Tekrar eden sınıflar
- CWE-269 Improper Privilege Management5
- CWE-287 Improper Authentication4
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor3
- CWE-285 Improper Authorization2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-668 Exposure of Resource to Wrong Sphere1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
25 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
85Hemen | CVE-2023-28432Silahlaştırılmış | Minio Information Disclosure in Cluster Deploymentminio · minio · CWE-200 | Yüksek7,5 | KEV | %84,0 | 22 Mar 2023 |
67Bu hafta | CVE-2023-28434Silahlaştırılmış | MinIO is vulnerable to privilege escalation on Linux/MacOSminio · minio · CWE-269 | Yüksek8,8 | KEV | %7,9 | 22 Mar 2023 |
46Planlayın | CVE-2021-43858Kavram kanıtı | User privilege escalation in MinIOminio · minio · CWE-269 | Yüksek8,8 | — | %35,5 | 27 Ara 2021 |
45Planlayın | CVE-2024-24747Kavram kanıtı | MinIO unsafe default: Access keys inherit `admin` of root user, allowing privilege escalationminio · minio · CWE-269 | Yüksek8,8 | — | %34,1 | 31 Oca 2024 |
37İzleyin | CVE-2021-21287Kavram kanıtı | Server-Side Request Forgery in MinIO Browser APIminio · minio · CWE-918 | Yüksek7,7 | — | %24,8 | 1 Şub 2021 |
36İzleyin | CVE-2022-24842İstismar yok | Improper Privilege Management in MinIOminio · minio · CWE-269 | Yüksek8,8 | — | %2,1 | 12 Nis 2022 |
36İzleyin | CVE-2026-33322İstismar yok | MinIO: JWT Algorithm Confusion in OIDC Authenticationminio · minio · CWE-287 | Kritik9,2 | — | %0,6 | 24 Mar 2026 |
36İzleyin | CVE-2026-33419İstismar yok | MinIO: LDAP login brute-force via user enumeration and missing rate limitminio · minio · CWE-204 | Kritik9,1 | — | %0,5 | 24 Mar 2026 |
35İzleyin | CVE-2021-41137İstismar yok | Bypassing policy restrictions on regular usersminio · minio · CWE-285 | Yüksek8,8 | — | %1,3 | 13 Eki 2021 |
35İzleyin | CVE-2023-28433İstismar yok | Minio Privilege Escalation on Windows via Path separator manipulationminio · minio · CWE-668 | Yüksek8,8 | — | %1,0 | 22 Mar 2023 |
35İzleyin | CVE-2023-25812İstismar yok | Allowed DELETE on resources on object locked buckets under Governance mode in Miniominio · minio · CWE-281 | Yüksek8,8 | — | %1,0 | 21 Şub 2023 |
35İzleyin | CVE-2026-40344İstismar yok | MinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer Uploadsminio · minio · CWE-287 | Yüksek8,8 | — | %0,7 | 21 Nis 2026 |
35İzleyin | CVE-2026-41145İstismar yok | MinIO has an Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer Uploadsminio · minio · CWE-287 | Yüksek8,8 | — | %0,6 | 21 Nis 2026 |
31İzleyin | CVE-2022-31028İstismar yok | Possible DDOS by establishing keep-alive connections with anonymous HTTP clients in MinIOminio · minio · CWE-400 | Yüksek7,5 | — | %3,0 | 7 Haz 2022 |
31İzleyin | CVE-2020-11012İstismar yok | Authentication bypass MinIO Admin APIminio · minio · CWE-305 | Yüksek7,5 | — | %1,9 | 23 Nis 2020 |
30İzleyin | CVE-2018-1000538İstismar yok | Minio Inc.minio · minio · CWE-774 | Yüksek7,5 | — | %1,5 | 26 Haz 2018 |
28İzleyin | CVE-2026-39414İstismar yok | MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsingminio · minio · CWE-770 | Yüksek7,1 | — | %0,6 | 8 Nis 2026 |
28İzleyin | CVE-2026-34204İstismar yok | MinIO is Vulnerable to SSE Metadata Injection via Replication Headersminio · minio · CWE-287 | Yüksek7,1 | — | %0,2 | 31 Mar 2026 |
27İzleyin | CVE-2026-42600İstismar yok | MinIO: Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpointminio · minio · CWE-22 | Orta6,9 | — | %0,5 | 11 May 2026 |
26İzleyin | CVE-2022-35919Kavram kanıtı | Authenticated requests for server update admin API allows path traversal in miniominio · minio · CWE-22 | Düşük2,7 | — | %52,3 | 1 Ağu 2022 |
26İzleyin | CVE-2021-21362İstismar yok | Bypassing readOnly policy by creating a temporary 'mc share upload' URLminio · minio · CWE-285 | Orta6,5 | — | %1,3 | 8 Mar 2021 |
26İzleyin | CVE-2023-27589İstismar yok | Minio vulnerable to denial of access by an admin privileged user for root credentialminio · minio · CWE-269 | Orta6,5 | — | %0,9 | 14 Mar 2023 |
23İzleyin | CVE-2021-21390İstismar yok | MITM modification of request bodies in MinIOminio · minio · CWE-924 | Orta5,9 | — | %0,9 | 19 Mar 2021 |
21İzleyin | CVE-2023-33955İstismar yok | Minio console object names with RIGHT-TO-LEFT OVERRIDE unicode character can be exploitedminio · console · CWE-200 | Orta5,3 | — | %0,6 | 30 May 2023 |
21İzleyin | CVE-2024-36107İstismar yok | Information disclosure in miniominio · minio · CWE-200 | Orta5,3 | — | %0,6 | 28 May 2024 |
- CVE-2023-2843285Hemen
Minio Information Disclosure in Cluster Deployment
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %84minio · minio22 Mar 2023
- CVE-2023-2843467Bu hafta
MinIO is vulnerable to privilege escalation on Linux/MacOS
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %8minio · minio22 Mar 2023
- CVE-2021-4385846Planlayın
User privilege escalation in MinIO
YüksekCVSS 8,8Kavram kanıtıEPSS %35minio · minio27 Ara 2021
- CVE-2024-2474745Planlayın
MinIO unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation
YüksekCVSS 8,8Kavram kanıtıEPSS %34minio · minio31 Oca 2024
- CVE-2021-2128737İzleyin
Server-Side Request Forgery in MinIO Browser API
YüksekCVSS 7,7Kavram kanıtıEPSS %25minio · minio1 Şub 2021
- CVE-2022-2484236İzleyin
Improper Privilege Management in MinIO
YüksekCVSS 8,8İstismar yokEPSS %2minio · minio12 Nis 2022
- CVE-2026-3332236İzleyin
MinIO: JWT Algorithm Confusion in OIDC Authentication
KritikCVSS 9,2İstismar yokEPSS %1minio · minio24 Mar 2026
- CVE-2026-3341936İzleyin
MinIO: LDAP login brute-force via user enumeration and missing rate limit
KritikCVSS 9,1İstismar yokEPSS %1minio · minio24 Mar 2026
- CVE-2021-4113735İzleyin
Bypassing policy restrictions on regular users
YüksekCVSS 8,8İstismar yokEPSS %1minio · minio13 Eki 2021
- CVE-2023-2843335İzleyin
Minio Privilege Escalation on Windows via Path separator manipulation
YüksekCVSS 8,8İstismar yokEPSS %1minio · minio22 Mar 2023
- CVE-2023-2581235İzleyin
Allowed DELETE on resources on object locked buckets under Governance mode in Minio
YüksekCVSS 8,8İstismar yokEPSS %1minio · minio21 Şub 2023
- CVE-2026-4034435İzleyin
MinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer Uploads
YüksekCVSS 8,8İstismar yokEPSS %1minio · minio21 Nis 2026
- CVE-2026-4114535İzleyin
MinIO has an Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer Uploads
YüksekCVSS 8,8İstismar yokEPSS %1minio · minio21 Nis 2026
- CVE-2022-3102831İzleyin
Possible DDOS by establishing keep-alive connections with anonymous HTTP clients in MinIO
YüksekCVSS 7,5İstismar yokEPSS %3minio · minio7 Haz 2022
- CVE-2020-1101231İzleyin
Authentication bypass MinIO Admin API
YüksekCVSS 7,5İstismar yokEPSS %2minio · minio23 Nis 2020
- CVE-2018-100053830İzleyin
Minio Inc.
YüksekCVSS 7,5İstismar yokEPSS %2minio · minio26 Haz 2018
- CVE-2026-3941428İzleyin
MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing
YüksekCVSS 7,1İstismar yokEPSS %1minio · minio8 Nis 2026
- CVE-2026-3420428İzleyin
MinIO is Vulnerable to SSE Metadata Injection via Replication Headers
YüksekCVSS 7,1İstismar yokEPSS %0minio · minio31 Mar 2026
- CVE-2026-4260027İzleyin
MinIO: Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint
OrtaCVSS 6,9İstismar yokEPSS %0minio · minio11 May 2026
- CVE-2022-3591926İzleyin
Authenticated requests for server update admin API allows path traversal in minio
DüşükCVSS 2,7Kavram kanıtıEPSS %52minio · minio1 Ağu 2022
- CVE-2021-2136226İzleyin
Bypassing readOnly policy by creating a temporary 'mc share upload' URL
OrtaCVSS 6,5İstismar yokEPSS %1minio · minio8 Mar 2021
- CVE-2023-2758926İzleyin
Minio vulnerable to denial of access by an admin privileged user for root credential
OrtaCVSS 6,5İstismar yokEPSS %1minio · minio14 Mar 2023
- CVE-2021-2139023İzleyin
MITM modification of request bodies in MinIO
OrtaCVSS 5,9İstismar yokEPSS %1minio · minio19 Mar 2021
- CVE-2023-3395521İzleyin
Minio console object names with RIGHT-TO-LEFT OVERRIDE unicode character can be exploited
OrtaCVSS 5,3İstismar yokEPSS %1minio · console30 May 2023
- CVE-2024-3610721İzleyin
Information disclosure in minio
OrtaCVSS 5,3İstismar yokEPSS %1minio · minio28 May 2024