CVE-2023-33955

MediumCVSS 4.3

Published: 30/05/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.65%

46th percentile - higher than 46% of all known CVEs

Summary

Minio Console, the UI for MinIO Object Storage, is vulnerable to the use of Unicode RIGHT-TO-LEFT OVERRIDE characters, allowing the original filename to be masked.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to data by misleading users about the actual filenames.

Recommendation

It is recommended to upgrade to version 0.28.0, where the issue has been patched.

Original NVD description (English source)

Minio Console is the UI for MinIO Object Storage. Unicode RIGHT-TO-LEFT OVERRIDE characters can be used to mask the original filename. This issue has been patched in version 0.28.0.