[security] The interface for uploading files does not require parameters and may be maliciously exploited
Open
- Dominant language
- JavaScript
- Stars
- 10.1k
- Forks
- 1.1k
- PR merge metrics
- No merged PRs in 30d
Description
I used MinIO, but I found that the interface can upload without parameters, which means my storage bucket may be maliciously uploaded.
I have correctly configured MinIO：
I may have missed some configurations to solve this problem, but I can't find them. I hope to get some help
Contributor guide
Assessment
This issue has not been assessed yet.