minio github.com/minio/console vulnerabilities

Latest minio github.com/minio/console CVEs

Newest publication first

1. CVE-2023-33955 Minio console object names with RIGHT-TO-LEFT OVERRIDE unicode character can be exploited

   Published 2023-05-30

   Medium·CVSS 5.3 EPSS 0.65%

   Minio Console is the UI for MinIO Object Storage. Unicode RIGHT-TO-LEFT OVERRIDE characters can be used to mask the original filename. This issue has been patched in version 0.28.0.

2. CVE-2021-41266 Authentication bypass issue in the Operator Console

   Published 2021-11-15

   Critical·CVSS 9.8 EPSS 48.1%

   Minio console is a graphical user interface for the for MinIO operator. Minio itself is a multi-cloud object storage project. Affected versions are subject to an authentication bypass issue in the Operator Console when an external IDP is enabled. All users on release v0.12.2 and...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.