tocsin

Alpine/rclone: unknown

Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve s3 --auth-proxy that allows authenticated tenants to manipulate other tenants' multipart uploads by referenci

Action: Upgrade rclone to 1.75.2-r0 or later.

Affected

introducedfixedlast affected
1.68.01.75.2-r0-

Fixed versions

1.75.2-r0

Sources

published · modified · JSON