crates.io/rustfs: high
RustFS: ListServiceAccount authorizes against wrong admin action, enabling cross-user enumeration and root service account takeover
Action: Upgrade rustfs to 1.0.0-alpha.98 or later.
cargo update -p rustfs --precise 1.0.0-alpha.98Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0-alpha.98 | - |
Fixed versions
| 1.0.0-alpha.98 |
Sources
- osv: GHSA-mm2q-qcmx-gw4w
- https://github.com/rustfs/rustfs/security/advisories/GHSA-mm2q-qcmx-gw4w
- https://github.com/rustfs/rustfs
published · modified · JSON