GHSA-r546-h3ff-q585MediumCVSS 4.2

Salt vulnerable to directory traversal attack in minion file cache creation

Published
June 13, 2025
Last Modified
June 13, 2025

🔗 CVE IDs covered (1)

📋 Description

Directory traversal attack in minion file cache creation. The master's default cache is vulnerable to a directory traversal attack. Which could be leveraged to write or overwrite 'cache' files outside of the cache directory.

🎯 Affected products2

  • pip/salt:>= 3006.0rc1, < 3006.12
  • pip/salt:>= 3007.0rc1, < 3007.4

🔗 References (5)