Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36587
HistoryAug 03, 2022 - 12:23 p.m.

Path Traversal

2022-08-0312:23:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14

0.003 Low

EPSS

Percentile

67.9%

github.com/minio/minio is vulnerable to path traversal. A privileged attacker with admin:ServerUpdate permission is able to trigger an error response, which in turn returns the content of the path specified, allowing the attacker to gain access to contents at any arbitrary paths that are readable by the MinIO process.

0.003 Low

EPSS

Percentile

67.9%