Lucene search
HistoryMay 30, 2023 - 7:15 a.m.
CVE-2023-33955
minio console
unicode
security patch
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5.6
Confidence
High
EPSS
0.001
Percentile
40.2%
Minio Console is the UI for MinIO Object Storage. Unicode RIGHT-TO-LEFT OVERRIDE characters can be used to mask the original filename. This issue has been patched in version 0.28.0.
Affected configurations
Node
minioconsoleRange<0.28.0
Related
veracode
veracode
Information Disclosure
2023-06-06 18:00:25
prion
prion
Code injection
2023-05-30 07:15:00
osv
osv
Minio console object names with RIGHT-TO-LEFT OVERRIDE unicode character can be exploited
2023-05-26 13:57:27
CVE-2023-33955
2023-05-30 07:15:10
cve
cve
CVE-2023-33955
2023-05-30 07:15:10
github
github
cvelist
cvelist
ibm
ibm
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5.6
Confidence
High
EPSS
0.001
Percentile
40.2%
Related for NVD:CVE-2023-33955