Minio 2021-10-10T16-53-30Z checkKeyValid improper authorization

A vulnerability, which was classified as critical, was found in Minio 2021-10-10T16-53-30Z. Affected is the function checkKeyValid. Upgrading to version 2021-10-13T00-23-17Z eliminates this vulnerability. Applying the patch 415bbc74aacd53a120e54a663e941b1809982dbd is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

Common Vulnerabilityies and Exposures

Contact us to get started

CVE-2024-8523 : LMXCMS UP TO 1.4 SQL COMMAND EXECUTION MODULE ADMIN.PHP FORMATDATA DATA CODE INJECTION

CVE-2024-8523 : LMXCMS UP TO 1.4 SQL COMMAND EXECUTION MODULE ADMIN.PHP FORMATDATA DATA CODE INJECTION

Description A vulnerability was found in lmxcms up to 1.4 and classified as critical. Affected by this issue is the

CVE-2024-25584 : OPEN-XCHANGE OX DOVECOT PRO UP TO 2.3.21 DATA COMMAND DATA AUTHENTICITY

CVE-2024-25584 : OPEN-XCHANGE OX DOVECOT PRO UP TO 2.3.21 DATA COMMAND DATA AUTHENTICITY

Description Dovecot accepts dot LF DOT LF symbol as end of DATA command. RFC requires that it should always be

CVE-2024-8521 : WAVELOG UP TO 1.8.0 LIVE QSO /QSO INDEX MANUAL CROSS SITE SCRIPTING

CVE-2024-8521 : WAVELOG UP TO 1.8.0 LIVE QSO /QSO INDEX MANUAL CROSS SITE SCRIPTING

Description A vulnerability, which was classified as problematic, was found in Wavelog up to 1.8.0. Affected is the function index