CVE-2023-33955

EUVD-2023-1573
Minio Console is the UI for MinIO Object Storage. Unicode RIGHT-TO-LEFT OVERRIDE characters can be used to mask the original filename. This issue has been patched in version 0.28.0.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
GitHub_MCNA
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 55%
Affected Products (NVD)
VendorProductVersion
minioconsole
𝑥
< 0.28.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/minio/console/commit/17e791afb90c9ad27c65f63c6be14f2f6a3a9d60
https://github.com/minio/console/releases/tag/v0.28.0
https://github.com/minio/console/security/advisories/GHSA-jv3f-7m33-qp65
https://github.com/minio/console/commit/17e791afb90c9ad27c65f63c6be14f2f6a3a9d60
https://github.com/minio/console/releases/tag/v0.28.0
https://github.com/minio/console/security/advisories/GHSA-jv3f-7m33-qp65