Go/github.com/minio/minio CVE-2024-55949: critical 9.3, EPSS 0.71%
MinIO vulnerable to privilege escalation in IAM import API
Action: Upgrade github.com/minio/minio to 0.0.0-20241213221912-68b004a48f41 or later.
go get github.com/minio/minio@v0.0.0-20241213221912-68b004a48f41Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-20220623162515-580d9db85e04 | 0.0.0-20241213221912-68b004a48f41 | - |
Fixed versions
| 0.0.0-20241213221912-68b004a48f41 |
Sources
- osv: GHSA-cwq8-g58r-32hg
- nvd: CVE-2024-55949
- https://github.com/minio/minio/security/advisories/GHSA-cwq8-g58r-32hg
- https://github.com/minio/minio/pull/20756
- https://github.com/minio/minio/commit/580d9db85e04f1b63cc2909af50f0ed08afa965f
- https://github.com/minio/minio/commit/f246c9053f9603e610d98439799bdd2a6b293427
- https://github.com/minio/minio
CVE-2024-55949 · published · modified · JSON