https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:19:43.457345+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-06172 bdu:2024-06172 2026-10-03T22:19:43.551772+00:00 bdu:2024-06172 https://cve.radiocsirt.org/vuln/bit-minio-2024-36107 BIT-minio-2024-36107 — Information disclosure in minio 2026-10-03T22:19:43.551809+00:00

Affected: Bitnami: minio

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. `If-Modified-Since` and `If-Unmodified-Since` headers when used with anonymous requests by sending a random object name requests can be used to determine if an object exists or not on the server on a specific bucket and also gain access to some amount of information such as `Last-Modified (of the latest version)`, `Etag (of the latest version)`, `x-amz-version-id (of the latest version)`, `Expires (metadata value of the latest version)`, `Cache-Control (metadata value of the latest version)`. This conditional check was being honored before validating if the anonymous access is indeed allowed on the metadata of an object. This issue has been addressed in commit `e0fe7cc3917`. Users must upgrade to RELEASE.2024-05-27T19-17-46Z for the fix. There are no known workarounds for this issue.

 https://cve.radiocsirt.org/vuln/cnvd-2024-25257 cnvd-2024-25257 2026-10-03T22:19:43.551847+00:00 cnvd-2024-25257 https://cve.radiocsirt.org/vuln/euvd-2026-161068 EUVD-2026-161068 2026-10-03T22:19:43.551862+00:00 EUVD-2026-161068 https://cve.radiocsirt.org/vuln/fkie_cve-2024-36107 fkie_cve-2024-36107 2026-10-03T22:19:43.551873+00:00

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. `If-Modified-Since` and `If-Unmodified-Since` headers when used with anonymous requests by sending a random object name requests can be used to determine if an object exists or not on the server on a specific bucket and also gain access to some amount of information such as `Last-Modified (of the latest version)`, `Etag (of the latest version)`, `x-amz-version-id (of the latest version)`, `Expires (metadata value of the latest version)`, `Cache-Control (metadata value of the latest version)`. This conditional check was being honored before validating if the anonymous access is indeed allowed on the metadata of an object. This issue has been addressed in commit `e0fe7cc3917`. Users must upgrade to RELEASE.2024-05-27T19-17-46Z for the fix. There are no known workarounds for this issue.

 https://cve.radiocsirt.org/vuln/ghsa-95fr-cm4m-q5p9 GHSA-95fr-cm4m-q5p9 — MinIO information disclosure vulnerability 2026-10-03T22:19:43.551899+00:00

Affected: Go: github.com/minio/minio

### Impact [If-Modified-Since](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/If-Modified-Since) [If-Unmodified-Since](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/If-Unmodified-Since)

Headers when used with anonymous requests by sending a random object name requests you can figure out if the object exists or not on the server on a specific bucket and also gain access to some amount of information such as

``` Last-Modified (of the latest version) Etag (of the latest version) x-amz-version-id (of the latest version) Expires (metadata value of the latest version) Cache-Control (metadata value of the latest version) ```

This conditional check was being honored before validating if the anonymous access is indeed allowed on the metadata of an object.

### Patches Yes this issue has been already fixed in

``` commit e0fe7cc391724fc5baa85b45508f425020fe4272 (HEAD -> master, origin/master) Author: Harshavardhana <harsha@minio.io> Date: Mon May 27 12:17:46 2024 -0700

fix: information disclosure bug in preconditions GET (#19810) precondition check was being honored before, validating if anonymous access is allowed on the metadata of an object, leading to metadata disclosure of the following headers. ``` Last-Modified Etag x-amz-version-id Expires: Cache-Control: ``` although the information presented is minimal in nature, and of opaque nature. It still simply discloses that an…

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1250 WID-SEC-W-2024-1250 — MinIO: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-03T22:19:43.551943+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in MinIO ausnutzen, um Informationen offenzulegen.