GHSA-q27c-j6j9-53w3MediumCVSS 5.0
Directory creation by malicious user in saltstack
🔗 CVE IDs covered (1)
📋 Description
Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.
🎯 Affected products2
- pip/salt:< 3005.5
- pip/salt:>= 3006.0, < 3006.6