UpHeron
All vulnerabilities

Servers and applications

CVE-2021-21287

MinIO is a High Performance Object Storage released under Apache License v2.0. In MinIO before version RELEASE.2021-01-30T00-20-58Z there is a server-side request forgery vulnerability. The target application may have functionality for importing data from a URL, publishing data to a URL, or otherwise reading data from a URL that can be tampered with. The attacker modifies the calls to this…

Severity
High 7.7
Published
1 Feb 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2021-01-30t00-20-58z
Sources
NVD

Affected software

SoftwareAffected versions
MinIOServers and applications · cpe:a:minio:minio
  • Every version before 2021-01-30t00-20-58z

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-21287
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-21287