cve/2023/CVE-2023-28432.md

CVE-2023-28432

Description

Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including MINIO_SECRET_KEY and MINIO_ROOT_PASSWORD, resulting in information disclosure. All users of distributed deployment are impacted. All users are advised to upgrade to RELEASE.2023-03-20T20-16-18Z.

POC

Reference

No PoCs from references.

Github

• https://github.com/0day404/vulnerability-poc
• https://github.com/0x783kb/Security-operation-book
• https://github.com/0xRulez/CVE-2023-28432
• https://github.com/20142995/Goby
• https://github.com/20142995/sectool
• https://github.com/ARPSyndicate/cvemon
• https://github.com/AbelChe/evil_minio
• https://github.com/Awrrays/FrameVul
• https://github.com/C1ph3rX13/CVE-2023-28432
• https://github.com/CHINA-china/MinIO_CVE-2023-28432_EXP
• https://github.com/CVEDB/awesome-cve-repo
• https://github.com/CVEDB/top
• https://github.com/Chocapikk/CVE-2023-28432
• https://github.com/Cuerz/CVE-2023-28432
• https://github.com/Henry4E36/POCS
• https://github.com/KayCHENvip/vulnerability-poc
• https://github.com/LHXHL/Minio-CVE-2023-28432
• https://github.com/Loginsoft-LLC/Linux-Exploit-Detection
• https://github.com/Loginsoft-Research/Linux-Exploit-Detection
• https://github.com/Majus527/MinIO_CVE-2023-28432
• https://github.com/Mr-xn/CVE-2023-28432
• https://github.com/MzzdToT/CVE-2023-28432
• https://github.com/Okaytc/minio_unauth_check
• https://github.com/Ostorlab/KEV
• https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
• https://github.com/Romanc9/Gui-poc-test
• https://github.com/SrcVme50/Skyfall
• https://github.com/TaroballzChen/CVE-2023-28432-metasploit-scanner
• https://github.com/Threekiii/Awesome-POC
• https://github.com/Threekiii/CVE
• https://github.com/Threekiii/Vulhub-Reproduce
• https://github.com/TrojanAZhen/Self_Back
• https://github.com/acheiii/CVE-2023-28432
• https://github.com/atk7r/Taichi
• https://github.com/bakery312/Vulhub-Reproduce
• https://github.com/bingtangbanli/CVE-2023-28432
• https://github.com/bingtangbanli/VulnerabilityTools
• https://github.com/d4n-sec/d4n-sec.github.io
• https://github.com/gmh5225/Awesome-ML-Security_
• https://github.com/gnarkill78/CSA_S2_2024
• https://github.com/gobysec/CVE-2023-28432
• https://github.com/h0ng10/CVE-2023-28432_docker
• https://github.com/hktalent/TOP
• https://github.com/izj007/wechat
• https://github.com/komodoooo/Some-things
• https://github.com/komodoooo/some-things
• https://github.com/netuseradministrator/CVE-2023-28432
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/peiqiF4ck/WebFrameworkTools-5.1-main
• https://github.com/soxoj/information-disclosure-writeups-and-pocs
• https://github.com/steponeerror/Cve-2023-28432-
• https://github.com/trailofbits/awesome-ml-security
• https://github.com/unam4/CVE-2023-28432-minio_update_rce
• https://github.com/whoami13apt/files2
• https://github.com/wjlin0/poc-doc
• https://github.com/wy876/POC
• https://github.com/wy876/wiki
• https://github.com/xk-mt/CVE-2023-28432
• https://github.com/yTxZx/CVE-2023-28432
• https://github.com/yuyongxr/minio_cve-2023-28432