UpHeron
All vulnerabilities

Servers and applications

CVE-2021-43858

MinIO is a Kubernetes native application for cloud storage. Prior to version `RELEASE.2021-12-27T07-23-18Z`, a malicious client can hand-craft an HTTP API call that allows for updating policy for a user and gaining higher privileges. The patch in version `RELEASE.2021-12-27T07-23-18Z` changes the accepted request body type and removes the ability to apply policy changes through this API. There…

Severity
High 8.8
Published
27 Dec 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2021-12-27t07-23-18z
Sources
NVD

Affected software

SoftwareAffected versions
MinIOServers and applications · cpe:a:minio:minio
  • Every version before 2021-12-27t07-23-18z

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-43858
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-43858