Known vulnerabilities in minio

Vendor: MinIO
Software: minio
Software CPE: cpe:2.3:a:minio:minio:*:*:*:*:*:*:*:*
Website: https://min.io/
Total vulnerabilities: 12
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting minio minio is affected by 12 known vulnerabilities: 2 high, 8 medium, 2 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80422 - Improper Access Control
CVE-2023-28434		 CWE-284 Medium
Available
Exploited
 2023-03-20T20-16-18Z 05.09.2023 SB2023042403
#VU75421 - Exposure of sensitive information to an unauthorized actor
CVE-2023-28432		 CWE-200 High
Available
Exploited
 2023-03-20T20-16-18Z 24.04.2023 SB2023042403
#VU72488 - Permissions, Privileges, and Access Controls
CVE-2023-25812		 CWE-264 Medium
No
No
 2023-02-17T17-52-43Z 22.02.2023 SB2023022211
SB2023080304
#VU66767 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-35919		 CWE-22 Low
Available
No
 2022-07-29T19-40-48Z 25.08.2022 SB2022082542
#VU64794 - Improper Authentication
CVE-2020-11012		 CWE-287 Medium
No
No
 2020-04-23T00-58-49Z 29.06.2022 SB2020042442
#VU64791 - Improper Authorization
CVE-2021-21362		 CWE-285 Low
No
No
 2021-03-04T00-53-13Z 29.06.2022 SB2022062922
SB2021031308
#VU64789 - Improper Enforcement of Message Integrity During Transmission in a Communication Channel
CVE-2021-21390		 CWE-924 Medium
No
No
 2021-03-17T02-33-02Z 29.06.2022 SB2021031920
#VU64786 - Improper Authorization
CVE-2021-41137		 CWE-285 Medium
No
No
 2021-10-13T00-23-17Z 29.06.2022 SB2021101347
#VU64785 - Improper Privilege Management
CVE-2022-24842		 CWE-269 Medium
No
No
 2022-04-12T06-55-35Z 29.06.2022 SB2022062921
#VU64694 - Improper Privilege Management
CVE-2021-43858		 CWE-269 High
Available
No
 2021-12-27T07-23-18Z 27.06.2022 SB2021122728
SB2022060926
#VU64000 - Improper input validation
CVE-2022-31028		 CWE-20 Medium
No
No
 2022-06-02T02-11-04Z 06.06.2022 SB2022060628
#VU50236 - Server-Side Request Forgery (SSRF)
CVE-2021-21287		 CWE-918 Medium
No
No
 2021-01-30T00-20-58Z 01.02.2021 SB2021020204
SB2021020609