rustfs vulnerabilities (crates.io)
13 vulnerabilities.
-
rustfscrates.io RustFS: ListServiceAccount authorizes against wrong admin action, enabling cross-user enumeration and root service account takeover 7.4 High -
rustfscrates.io RustFS missing admin authorization on notification target endpoints, which allows unauthenticated configuration of event webhooks 8.3 High -
rustfscrates.io RustFS has an authorization bypass in multipart UploadPartCopy enables cross-bucket object exfiltration 5.3 Medium -
rustfscrates.io Rust has Critical Stored XSS in Preview Modal, leading to Administrative Account Takeover 9.1 Critical -
rustfscrates.io RustFS's Missing Post Policy Validation leads to Arbitrary Object Write 8.1 High -
rustfscrates.io RustFS Logs Sensitive Credentials in Plaintext 6.9 Medium -
rustfscrates.io RustFS sourceIp bypass via spoofed X-Forwarded-For/Real-IP headers 7.7 High -
rustfscrates.io RustFS RPC signature verification logs shared secret 2.9 Low -
rustfscrates.io RustFS has IAM deny_only Short-Circuit that Allows Privilege Escalation via Service Account Minting 5.7 Medium -
rustfscrates.io RustFS has IAM Incorrect Authorization in ImportIam that Allows Privilege Escalation 5.7 Medium -
rustfscrates.io RustFS gRPC GetMetrics deserialization panic enables remote DoS 5.5 Medium -
rustfscrates.io RustFS Path Traversal Vulnerability 8.8 High -
rustfscrates.io RustFS has a gRPC Hardcoded Token Authentication Bypass 9.8 Critical