Skip to content

Add MinIO CVE-2023-28432 vulnerable environment - #682

Draft
kkinomalo wants to merge 3 commits into
gunh0:mainfrom
kkinomalo:agent/add-minio-cve-2023-28432
Draft

Add MinIO CVE-2023-28432 vulnerable environment#682
kkinomalo wants to merge 3 commits into
gunh0:mainfrom
kkinomalo:agent/add-minio-cve-2023-28432

Conversation

@kkinomalo

Copy link
Copy Markdown

๋ณ€๊ฒฝ ๋‚ด์šฉ

  • MinIO CVE-2023-28432 ์ทจ์•ฝ ํ™˜๊ฒฝ ์ถ”๊ฐ€
  • ๊ณ ์ •๋œ ์ทจ์•ฝ MinIO ์†Œ์Šค ์ปค๋ฐ‹์„ Dockerfile์—์„œ ์ง์ ‘ ๋นŒ๋“œ
  • ์ธ์ฆ ์—†์ด ๊ด€๋ฆฌ์ž ํ™˜๊ฒฝ๋ณ€์ˆ˜๋ฅผ ํ™•์ธํ•˜๋Š” Python PoC ์ถ”๊ฐ€
  • ๋กœ์ปฌ ์Šคํฌ๋ฆฐ์ƒท๊ณผ ํ•œ๊ธ€ README ์ถ”๊ฐ€

์žฌํ˜„ ๋ฐฉ๋ฒ•

cd MinIO/CVE-2023-28432
docker compose up --build -d
python .\poc.py

๊ฒ€์ฆ

  • docker compose config --quiet ํ†ต๊ณผ
  • ๊นจ๋—ํ•œ ๋ณผ๋ฅจ ์ƒํƒœ์—์„œ ๋นŒ๋“œ ๋ฐ 3๋…ธ๋“œ ๊ธฐ๋™ ํ™•์ธ
  • python .\poc.py๋กœ MINIO_ROOT_USER, MINIO_ROOT_PASSWORD ๋…ธ์ถœ ํ™•์ธ

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant