CVE-2023-33955

Published: May 30, 2023Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Minio Console is the UI for MinIO Object Storage. Unicode RIGHT-TO-LEFT OVERRIDE characters can be used to mask the original filename. This issue has been patched in version 0.28.0.

Affected (1)

Products: Minio: Console

Minio

1 product

Console

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Minio Console	Before 0.28.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

https://github.com/minio/console/commit/17e791afb90c9ad27c65f63c6be14f2f6a3a9d60

Source: security-advisories@github.com

Patch

https://github.com/minio/console/releases/tag/v0.28.0

Source: security-advisories@github.com

Release Notes

https://github.com/minio/console/security/advisories/GHSA-jv3f-7m33-qp65

Source: security-advisories@github.com

Vendor Advisory

https://github.com/minio/console/commit/17e791afb90c9ad27c65f63c6be14f2f6a3a9d60

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://github.com/minio/console/releases/tag/v0.28.0

Source: af854a3a-2127-422b-91ae-364da2661108

Release Notes

https://github.com/minio/console/security/advisories/GHSA-jv3f-7m33-qp65

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.