Skip to content
Threat Feed
Subscribe

Tag

Minio

4 briefs RSS
medium advisory

MinIO Information Disclosure Vulnerability

A remote, authenticated attacker can exploit a vulnerability in MinIO to disclose sensitive information.

MinIO information-disclosure
2r 1t
high advisory

MinIO Unauthenticated Object Write Vulnerability

Two authentication bypass vulnerabilities in MinIO allow writing arbitrary objects to any bucket with only a valid access key, without the secret key or valid signature, impacting all MinIO deployments.

minio authentication-bypass object-storage
2r 3t
high advisory

MinIO S3 Select CSV Parsing Denial of Service

MinIO's S3 Select feature is vulnerable to denial of service due to unbounded memory allocation when processing CSV files without newlines, leading to memory exhaustion and server crashes.

dos minio s3select
2r 1t
high advisory

MinIO SSE Metadata Injection via Replication Headers Leads to Data Unreadability

A vulnerability in MinIO allows authenticated users with `s3:PutObject` permission to inject internal server-side encryption metadata into objects via crafted replication headers, leading to permanent data unreadability.

minio s3 metadata-injection denial-of-service
2r 1t