Threats Tagged 'bit-seaweedfs-2026-55874'
View all threats tagged with 'bit-seaweedfs-2026-55874'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'bit-seaweedfs-2026-55874'
Click on any threat for detailed analysis and mitigation recommendations
0 SeaweedFS S3 gateway versions prior to 4.34 contain a path traversal vulnerability in the X-Amz-Copy-Source header used by CopyObject and UploadPartCopy operations. This flaw allows an attacker authorized on one bucket to read objects from other buckets by exploiting improper validation of path segments in the copy source header. The vulnerability breaks bucket isolation, enabling cross-bucket object reads. The issue was fixed in version 4.34 by validating the copy-source bucket and object key to reject traversal segments. Join the discussion | GCVE Database | 08/28/2026, 22:17:33 UTC Added: 07/14/2026, 11:23:52 UTC |
Showing 1 to 1 of 1 result