Back to the CVE list
CVE-2023-28432 CISA KEV · Actively exploited

MinIO Information Disclosure Vulnerability

CVSS score

—

EPSS probability

%84.0

Risk score

—

Published

3 y ago

OverviewPublic Exploits (15)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
Mr-xn/CVE-2023-28432
GitHub

CVE-2023-28434 nuclei templates (★3)

Public PoCSource updated: 24.03.2023 01:47:45
G
MzzdToT/CVE-2023-28432
GitHub

MinIO存在信息泄露漏洞，未经身份认证的远程攻击者通过发送特殊HTTP请求即可获取所有环境变量，其中包括MINIO_SECRET_KEY和MINIO_ROOT_PASSWORD，造成敏感信息泄露，最终可能导致攻击者以管理员身份登录MinIO (★3)

Public PoCSource updated: 27.03.2023 11:29:36
G
gobysec/CVE-2023-28432
GitHub

MiniO verify interface sensitive information disclosure vulnerability (CVE-2023-28432) (★1)

Public PoCSource updated: 24.03.2023 01:29:34
G
acheiii/CVE-2023-28432
GitHub

CVE-2023-28432 POC (★1)

Public PoCSource updated: 24.03.2023 17:51:16
G
Majus527/MinIO_CVE-2023-28432
GitHub

minio敏感信息泄露 (★1)

Public PoCSource updated: 31.03.2023 23:09:52
G
steponeerror/Cve-2023-28432-
GitHub

通过vulhub的复现过程实现了，基本的批量检测。比较垃圾但是勉强能用 (★0)

Public PoCSource updated: 27.03.2023 16:15:08
G
Cuerz/CVE-2023-28432
GitHub

CVE-2023-28432 MinIO敏感信息泄露检测脚本 (★0)

Public PoCSource updated: 29.03.2023 10:33:56
G
h0ng10/CVE-2023-28432_docker
GitHub

Test environments for CVE-2023-28432, information disclosure in MinIO clusters (★0)

Public PoCSource updated: 10.04.2023 05:28:33
G
TaroballzChen/CVE-2023-28432-metasploit-scanner
GitHub

MinIO Information Disclosure Vulnerability scanner by metasploit (★0)

Public PoCSource updated: 28.05.2023 00:35:58
G
bingtangbanli/CVE-2023-28432
GitHub

CVE-2023-28432检测工具 (★0)

Public PoCSource updated: 21.08.2023 15:03:25
G
NET-Flowers/CVE-2023-28432
GitHub

CVE-2023-28432检测工具 (★0)

Public PoCSource updated: 28.08.2023 10:58:07
G
Chocapikk/CVE-2023-28432
GitHub

Automated vulnerability scanner for CVE-2023-28432 in Minio deployments, revealing sensitive environment variables. (★0)

Public PoCSource updated: 13.11.2023 18:02:41
G
Fw-fW-fw/minio-CVE-2023-28432-rce
GitHub

https://github.com/AbelChe/evil_minio/tree/main 打包留存 (★0)

Public PoCSource updated: 27.11.2023 03:23:34
G
C1ph3rX13/CVE-2023-28432
GitHub

CVE-2023-28432 Minio Information isclosure Exploit (★0)

Public PoCSource updated: 07.12.2023 15:17:39
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-28432.yaml
Nuclei

Nuclei: MinIO Cluster Deployment - Information Disclosure

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-28432"