Количество 3
Количество 3
CVE-2026-27607
RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.56 through 1.0.0-alpha.82, RustFS does not validate policy conditions in presigned POST uploads (PostObject), allowing attackers to bypass content-length-range, starts-with, and Content-Type constraints. This enables unauthorized file uploads exceeding size limits, uploads to arbitrary object keys, and content-type spoofing, potentially leading to storage exhaustion, unauthorized data access, and security bypasses. Version 1.0.0-alpha.83 fixes the issue.
GHSA-w5fh-f8xh-5x3p
RustFS: Missing Post Policy Validation leads to Arbitrary Object Write
BDU:2026-05083
Уязвимость распределенной системы хранения данных RustFS, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю оказать воздействие на целостность и доступность защищаемой информации
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-27607 RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.56 through 1.0.0-alpha.82, RustFS does not validate policy conditions in presigned POST uploads (PostObject), allowing attackers to bypass content-length-range, starts-with, and Content-Type constraints. This enables unauthorized file uploads exceeding size limits, uploads to arbitrary object keys, and content-type spoofing, potentially leading to storage exhaustion, unauthorized data access, and security bypasses. Version 1.0.0-alpha.83 fixes the issue. | CVSS3: 8.1 | 0% Низкий | 6 месяцев назад |
| GHSA-w5fh-f8xh-5x3p RustFS: Missing Post Policy Validation leads to Arbitrary Object Write | CVSS3: 8.1 | 0% Низкий | 6 месяцев назад |
 | BDU:2026-05083 Уязвимость распределенной системы хранения данных RustFS, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю оказать воздействие на целостность и доступность защищаемой информации | CVSS3: 9.1 | 0% Низкий | 6 месяцев назад |
Уязвимостей на страницу