CVE-2023-33955

low-risk

Published 2023-05-30

Minio Console is the UI for MinIO Object Storage. Unicode RIGHT-TO-LEFT OVERRIDE characters can be used to mask the original filename. This issue has been patched in version 0.28.0.

Do I need to act?

0.36% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.3/10 Medium

NETWORK / LOW complexity

Affected Products (1)

Console

Affected Vendors

Minio

References (6)

Patch https://github.com/minio/console/commit/17e791afb90c9ad27c65f63c6be14f2f6a3a9d60

Release Notes https://github.com/minio/console/releases/tag/v0.28.0

Vendor Advisory https://github.com/minio/console/security/advisories/GHSA-jv3f-7m33-qp65

Patch https://github.com/minio/console/commit/17e791afb90c9ad27c65f63c6be14f2f6a3a9d60

Release Notes https://github.com/minio/console/releases/tag/v0.28.0

Vendor Advisory https://github.com/minio/console/security/advisories/GHSA-jv3f-7m33-qp65

/ 100

low-risk

Severity 18/34 · Moderate

Exploitability 1/34 · Minimal

Exposure 5/34 · Minimal