Servers and applications
CVE-2022-35919
MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. In affected versions all 'admin' users authorized for `admin:ServerUpdate` can selectively trigger an error that in response, returns the content of the path requested. Any normal OS system would allow access to contents at any arbitrary paths that are readable by MinIO process. Users are advised to…
- Severity
- Low 2.7
- Published
- 1 Aug 2022
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 2022-07-29t19-40-48z
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
MinIOServers and applications · cpe:a:minio:minio |
|