漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
RustFS's Missing Post Policy Validation leads to Arbitrary Object Write
Vulnerability Description
RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.56 through 1.0.0-alpha.82, RustFS does not validate policy conditions in presigned POST uploads (PostObject), allowing attackers to bypass content-length-range, starts-with, and Content-Type constraints. This enables unauthorized file uploads exceeding size limits, uploads to arbitrary object keys, and content-type spoofing, potentially leading to storage exhaustion, unauthorized data access, and security bypasses. Version 1.0.0-alpha.83 fixes the issue.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Vulnerability Type
输入验证不恰当
Vulnerability Title
rustfs 安全漏洞
Vulnerability Description
rustfs是RustFS开源的一个高性能对象存储系统。 rustfs 1.0.0-alpha.56至1.0.0-alpha.82版本存在安全漏洞，该漏洞源于未验证预签名POST上传中的策略条件，可能导致绕过内容长度范围、起始条件和内容类型约束，进而导致未经授权的文件上传。
CVSS Information
N/A
Vulnerability Type
N/A