CVE-2021-21287

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2021-21287
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-21287.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-21287
Aliases
Related
Published
2021-02-01T18:15:13Z
Modified
2024-10-12T06:46:27.747590Z
Severity
  • 7.7 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

MinIO is a High Performance Object Storage released under Apache License v2.0. In MinIO before version RELEASE.2021-01-30T00-20-58Z there is a server-side request forgery vulnerability. The target application may have functionality for importing data from a URL, publishing data to a URL, or otherwise reading data from a URL that can be tampered with. The attacker modifies the calls to this functionality by supplying a completely different URL or by manipulating how URLs are built (path traversal etc.). In a Server-Side Request Forgery (SSRF) attack, the attacker can abuse functionality on the server to read or update internal resources. The attacker can supply or modify a URL which the code running on the server will read or submit data, and by carefully selecting the URLs, the attacker may be able to read server configuration such as AWS metadata, connect to internal services like HTTP enabled databases, or perform post requests towards internal services which are not intended to be exposed. This is fixed in version RELEASE.2021-01-30T00-20-58Z, all users are advised to upgrade. As a workaround you can disable the browser front-end with "MINIO_BROWSER=off" environment variable.

References

Affected packages

Git / github.com/minio/minio

Affected ranges

Type
GIT
Repo
https://github.com/minio/minio
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
eb6871ecd960d570f70698877209e6db181bf276

Affected versions

OFFICIAL.*

OFFICIAL.2016-02-08T00-12-28Z

RELEASE.*

RELEASE.2016-03-11T03-45-50Z
RELEASE.2016-03-21T21-08-51Z
RELEASE.2016-04-14T18-38-10Z
RELEASE.2016-06-03T19-32-05Z
RELEASE.2016-07-13T21-46-05Z
RELEASE.2016-08-16T23-19-45Z
RELEASE.2016-08-21T02-44-47Z
RELEASE.2016-09-11T17-42-18Z
RELEASE.2016-12-12T18-35-43Z
RELEASE.2016-12-12T23-44-33Z
RELEASE.2016-12-13T17-19-42Z
RELEASE.2017-08-05T00-00-53Z
RELEASE.2017-09-29T19-16-56Z
RELEASE.2017-10-27T18-59-02Z
RELEASE.2017-11-22T19-55-46Z
RELEASE.2017-12-28T01-21-00Z
RELEASE.2018-01-02T23-07-00Z
RELEASE.2018-01-18T20-33-21Z
RELEASE.2018-02-09T22-40-05Z
RELEASE.2018-03-12T21-25-28Z
RELEASE.2018-03-16T22-52-12Z
RELEASE.2018-03-19T19-22-06Z
RELEASE.2018-03-28T23-45-53Z
RELEASE.2018-03-30T00-38-44Z
RELEASE.2018-04-04T05-20-54Z
RELEASE.2018-04-12T23-41-09Z
RELEASE.2018-04-19T22-54-58Z
RELEASE.2018-04-27T23-33-52Z
RELEASE.2018-05-04T23-13-12Z
RELEASE.2018-05-10T00-00-42Z
RELEASE.2018-05-11T00-29-24Z
RELEASE.2018-05-16T23-35-33Z
RELEASE.2018-05-25T19-49-13Z
RELEASE.2018-06-07T19-10-07Z
RELEASE.2018-06-08T03-49-38Z
RELEASE.2018-06-09T03-43-35Z
RELEASE.2018-06-22T23-48-46Z
RELEASE.2018-06-29T02-11-29Z
RELEASE.2018-07-10T01-42-11Z
RELEASE.2018-07-13T00-09-07Z
RELEASE.2018-07-23T18-34-49Z
RELEASE.2018-07-31T02-11-47Z
RELEASE.2018-08-02T23-11-36Z
RELEASE.2018-08-18T03-49-57Z
RELEASE.2018-08-21T00-37-20Z
RELEASE.2018-08-25T01-56-38Z
RELEASE.2018-09-01T00-38-25Z
RELEASE.2018-09-11T01-39-21Z
RELEASE.2018-09-12T18-49-56Z
RELEASE.2018-09-25T21-34-43Z
RELEASE.2018-10-05T01-03-03Z
RELEASE.2018-10-06T00-15-16Z
RELEASE.2018-10-18T00-28-58Z
RELEASE.2018-10-25T01-27-03Z
RELEASE.2018-11-06T01-01-02Z
RELEASE.2018-11-15T01-26-07Z
RELEASE.2018-11-17T01-23-48Z
RELEASE.2018-11-22T02-51-56Z
RELEASE.2018-11-30T03-56-59Z
RELEASE.2018-12-06T01-27-43Z
RELEASE.2018-12-13T02-04-19Z
RELEASE.2018-12-19T23-46-24Z
RELEASE.2018-12-27T18-33-08Z
RELEASE.2019-01-10T00-21-20Z
RELEASE.2019-01-16T21-44-08Z
RELEASE.2019-01-23T23-18-58Z
RELEASE.2019-01-31T00-31-19Z
RELEASE.2019-02-06T21-16-36Z
RELEASE.2019-02-12T21-58-47Z
RELEASE.2019-02-14T00-21-45Z
RELEASE.2019-02-20T22-44-29Z
RELEASE.2019-02-26T19-51-46Z
RELEASE.2019-03-06T22-47-10Z
RELEASE.2019-03-13T21-59-47Z
RELEASE.2019-03-20T22-38-47Z
RELEASE.2019-03-27T22-35-21Z
RELEASE.2019-04-04T18-31-46Z
RELEASE.2019-04-09T01-22-30Z
RELEASE.2019-04-18T01-15-57Z
RELEASE.2019-04-18T21-44-59Z
RELEASE.2019-04-23T23-50-36Z
RELEASE.2019-05-02T19-07-09Z
RELEASE.2019-05-14T23-57-45Z
RELEASE.2019-05-23T00-29-34Z
RELEASE.2019-06-01T03-46-14Z
RELEASE.2019-06-04T01-15-58Z
RELEASE.2019-06-11T00-44-33Z
RELEASE.2019-06-13T01-41-13Z
RELEASE.2019-06-15T23-07-18Z
RELEASE.2019-06-19T18-24-42Z
RELEASE.2019-06-27T21-13-50Z
RELEASE.2019-07-05T21-20-21Z
RELEASE.2019-07-10T00-34-56Z
RELEASE.2019-07-17T22-54-12Z
RELEASE.2019-07-24T02-02-23Z
RELEASE.2019-07-31T18-57-56Z
RELEASE.2019-08-01T22-18-54Z
RELEASE.2019-08-07T01-59-21Z
RELEASE.2019-08-14T20-37-41Z
RELEASE.2019-08-21T19-40-07Z
RELEASE.2019-08-29T00-25-01Z
RELEASE.2019-09-05T23-24-38Z
RELEASE.2019-09-11T19-53-16Z
RELEASE.2019-09-18T21-55-05Z
RELEASE.2019-09-25T18-25-51Z
RELEASE.2019-09-26T19-42-35Z
RELEASE.2019-10-02T21-19-38Z
RELEASE.2019-10-11T00-38-09Z
RELEASE.2019-10-12T01-39-57Z
RELEASE.2019-12-17T23-16-33Z
RELEASE.2019-12-19T22-52-26Z
RELEASE.2019-12-24T23-04-45Z
RELEASE.2019-12-30T05-45-39Z
RELEASE.2020-01-03T19-12-21Z
RELEASE.2020-01-16T03-05-44Z
RELEASE.2020-01-16T22-40-29Z
RELEASE.2020-01-25T02-50-51Z
RELEASE.2020-02-07T04-56-50Z
RELEASE.2020-02-07T23-28-16Z
RELEASE.2020-02-20T22-51-23Z
RELEASE.2020-02-27T00-23-05Z
RELEASE.2020-03-05T01-04-19Z
RELEASE.2020-03-06T22-23-56Z
RELEASE.2020-03-09T18-26-53Z
RELEASE.2020-03-14T02-21-58Z
RELEASE.2020-03-19T21-49-00Z
RELEASE.2020-03-25T07-03-04Z
RELEASE.2020-04-02T21-34-49Z
RELEASE.2020-04-04T05-39-31Z
RELEASE.2020-04-10T03-34-42Z
RELEASE.2020-04-15T00-39-01Z
RELEASE.2020-04-15T19-42-18Z
RELEASE.2020-04-22T00-11-12Z
RELEASE.2020-04-23T00-58-49Z
RELEASE.2020-04-28T23-56-56Z
RELEASE.2020-05-01T22-19-14Z
RELEASE.2020-05-06T23-23-25Z
RELEASE.2020-05-08T02-40-49Z
RELEASE.2020-05-16T01-33-21Z
RELEASE.2020-05-28T23-29-21Z
RELEASE.2020-05-29T14-08-49Z
RELEASE.2020-06-01T17-28-03Z
RELEASE.2020-06-03T22-13-49Z
RELEASE.2020-06-12T00-06-19Z
RELEASE.2020-07-11T06-07-16Z
RELEASE.2020-07-11T21-14-23Z
RELEASE.2020-07-12T19-14-17Z
RELEASE.2020-07-13T18-09-56Z
RELEASE.2020-07-14T19-14-30Z
RELEASE.2020-07-18T18-48-16Z
RELEASE.2020-07-20T02-25-16Z
RELEASE.2020-07-22T00-26-33Z
RELEASE.2020-07-24T22-43-05Z
RELEASE.2020-07-27T18-37-02Z
RELEASE.2020-07-31T03-39-05Z
RELEASE.2020-08-04T23-10-51Z
RELEASE.2020-08-05T21-34-13Z
RELEASE.2020-08-07T01-23-07Z
RELEASE.2020-08-08T04-50-06Z
RELEASE.2020-08-13T02-39-50Z
RELEASE.2020-08-16T18-39-38Z
RELEASE.2020-08-18T19-41-00Z
RELEASE.2020-08-25T00-21-20Z
RELEASE.2020-08-26T00-00-49Z
RELEASE.2020-08-27T05-16-20Z
RELEASE.2020-09-02T18-19-50Z
RELEASE.2020-09-05T07-14-49Z
RELEASE.2020-09-08T23-05-18Z
RELEASE.2020-09-10T22-02-45Z
RELEASE.2020-09-16T04-22-35Z
RELEASE.2020-09-17T04-49-20Z
RELEASE.2020-09-21T22-31-59Z
RELEASE.2020-09-23T19-18-30Z
RELEASE.2020-09-26T03-44-56Z
RELEASE.2020-10-03T02-19-42Z
RELEASE.2020-10-09T22-55-05Z
RELEASE.2020-10-12T21-53-21Z
RELEASE.2020-10-18T21-54-12Z
RELEASE.2020-10-27T04-03-55Z
RELEASE.2020-10-28T08-16-50Z
RELEASE.2020-11-06T23-17-07Z
RELEASE.2020-11-10T21-02-24Z
RELEASE.2020-11-12T22-33-34Z
RELEASE.2020-11-13T20-10-18Z
RELEASE.2020-11-19T23-48-16Z
RELEASE.2020-11-25T22-36-25Z
RELEASE.2020-12-03T00-03-10Z
RELEASE.2020-12-03T05-49-24Z
RELEASE.2020-12-10T01-54-29Z
RELEASE.2020-12-12T08-39-07Z
RELEASE.2020-12-16T05-05-17Z
RELEASE.2020-12-18T03-27-42Z
RELEASE.2020-12-23T02-24-12Z
RELEASE.2020-12-26T01-35-54Z
RELEASE.2020-12-29T23-29-29Z
RELEASE.2021-01-05T05-22-38Z
RELEASE.2021-01-08T21-18-21Z
RELEASE.2021-01-16T02-19-44Z

Other

release-1434511043