Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Minio exploit

2024-07-09 | CVSS 7.5

Share

## https://sploitus.com/exploit?id=92C917C7-4F14-5D8F-A854-17C0A0E8428D # CVE-2023-28432 `Description`: ```txt The Multi-Cloud Object Storage framework MinIO from RELEASE.2019-12-17T23-16-33Z to RELEASE.2023-03-20T20-16-18Z is vulnerable to information disclosure. In the affected versions, MinIO returns all environment variables, including "MINIO_SECRET_KEY" and "MINIO_ROOT_PASSWORD". ``` ## Usage ```bash python3 exploit.py -u http://targeturl ``` - the full response will be saved to response.txt