rustfs Security Advisories - Cargo | Ecosyste.ms: Advisories

rustfs

RustFS is a high-performance distributed object storage software built using Rust, one of the most popular languages worldwide.

View on github.com · View on crates.io

Security Advisories for rustfs in cargo

High

27 days ago

RustFS: ListServiceAccount authorizes against wrong admin action, enabling cross-user enumeration and root service account takeover GSA_kwCzR0hTQS1tbTJxLXFjbXgtZ3c0d84ABWM4

cargo rustfs

High

about 1 month ago

RustFS: Missing admin authorization on notification target endpoints allows unauthenticated configuration of event webhooks GSA_kwCzR0hTQS1wZmNxLTRnanItNmdqbc4ABVpl

cargo rustfs

Moderate

about 2 months ago

RustFS has an authorization bypass in multipart UploadPartCopy enables cross-bucket object exfiltration GSA_kwCzR0hTQS1teDQyLWo2d3YtcHg5OM4ABU3g

cargo rustfs

Critical

3 months ago

Rust has Critical Stored XSS in Preview Modal, leading to Administrative Account Takeover GSA_kwCzR0hTQS12OWZnLTNjcjItMjc3as4ABS2Q

cargo rustfs

High

3 months ago

RustFS: Missing Post Policy Validation leads to Arbitrary Object Write GSA_kwCzR0hTQS13NWZoLWY4eGgtNXgzcM4ABS2J

cargo rustfs

Moderate

4 months ago

RustFS Logs Sensitive Credentials in Plaintext GSA_kwCzR0hTQS1yNTRnLTQ5cngtOThjcs4ABR3n

cargo rustfs

High

4 months ago

RustFS has SourceIp bypass via spoofed X-Forwarded-For/Real-IP headers GSA_kwCzR0hTQS1mYzZnLTJnY3AtMnFycc4ABR3m

cargo rustfs

Low

5 months ago

RustFS's RPC signature verification logs shared secret GSA_kwCzR0hTQS0zMzN2LTY4eGgtOG1tcc4ABRLa

cargo rustfs

Moderate

5 months ago

RustFS has IAM deny_only Short-Circuit that Allows Privilege Escalation via Service Account Minting GSA_kwCzR0hTQS14Z3I1LXFjNnctdmNnOc4ABQ3V

cargo rustfs

Moderate

5 months ago

RustFS has IAM Incorrect Authorization in ImportIam that Allows Privilege Escalation GSA_kwCzR0hTQS12Y3doLXBmZjktNjRjY84ABQ3U

cargo rustfs

Moderate

5 months ago

RustFS gRPC GetMetrics deserialization panic enables remote DoS GSA_kwCzR0hTQS1ndzJ4LXE3MzktcWhjcs4ABQzt

cargo rustfs

High

5 months ago

RustFS Path Traversal Vulnerability GSA_kwCzR0hTQS1wcTI5LTY5amctOW14Y84ABQzQ

cargo rustfs

Critical

5 months ago

RustFS has a gRPC Hardcoded Token Authentication Bypass GSA_kwCzR0hTQS1oOTU2LXJoN3gtcHBnas4ABQaS

cargo rustfs

Filter by Severity

Moderate 5 High 5 Critical 2 Low 1