GHSA-r546-h3ff-q585
GitHub Security Advisory
Salt vulnerable to directory traversal attack in minion file cache creation
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
Directory traversal attack in minion file cache creation. The master's default cache is vulnerable to a directory traversal attack. Which could be leveraged to write or overwrite 'cache' files outside of the cache directory.
Affected Packages
PyPI
salt
Affected versions:
3006.0rc1
(fixed in 3006.12)
PyPI
salt
Affected versions:
3007.0rc1
(fixed in 3007.4)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: June 14, 2025 6:24 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.