{"action":"Upgrade github.com/minio/minio to 0.0.0-202303200735 or later.","affected":[{"introduced":"0"}],"component":"github.com/minio/minio","cve_ids":["CVE-2023-28433"],"ecosystem":"Go","epss":0.00981,"exploited":false,"fixed_versions":["0.0.0-202303200735"],"ghsa_id":"GHSA-w23q-4hw3-2pp6","id":"tcs_01M5KFPXZZYET921ENJC52F6Q9","modified_at":"2026-10-08T08:11:02.392575410Z","published_at":"2023-09-06T18:43:13Z","references":["https://osv.dev/vulnerability/GHSA-w23q-4hw3-2pp6","https://github.com/minio/minio/security/advisories/GHSA-w23q-4hw3-2pp6","https://nvd.nist.gov/vuln/detail/CVE-2023-28433","https://github.com/minio/minio/commit/8d6558b23649f613414c8527b58973fbdfa4d1b8","https://github.com/minio/minio/commit/b3c54ec81e0a06392abfb3a1ffcdc80c6fbf6ebc","https://github.com/minio/minio","https://github.com/minio/minio/releases/tag/RELEASE.2023-03-20T20-16-18Z"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-w23q-4hw3-2pp6","url":"https://osv.dev/vulnerability/GHSA-w23q-4hw3-2pp6"}],"summary":"Minio vulnerable to Privilege Escalation on Windows via Path separator manipulation"}