All vulnerabilities

Servers and applications

CVE-2022-35919

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. In affected versions all 'admin' users authorized for `admin:ServerUpdate` can selectively trigger an error that in response, returns the content of the path requested. Any normal OS system would allow access to contents at any arbitrary paths that are readable by MinIO process. Users are advised to…

Severity
Low 2.7
Published
1 Aug 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2022-07-29t19-40-48z
Sources
NVD

Affected software

SoftwareAffected versions
MinIOServers and applications · cpe:a:minio:minio
  • Every version before 2022-07-29t19-40-48z

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-35919
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-35919