Understanding the Attack Vector for CVE-2023-28432 and CVE-2023-28434

[freedude]

https://blog.min.io/security-advisory-stackedcves/

[freedude]

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.

CVE-2023-28434 MinIO Security Feature Bypass Vulnerability

https://www.cisa.gov/news-events/alerts/2023/09/19/cisa-adds...

[freedude → freedude]

https://nvd.nist.gov/vuln/detail/CVE-2023-28434