Salt Project vulnerabilities

1 known vulnerability in Salt Project from VMware. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  Salt Project: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-22232Jun 27, 2024VMware

  A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt master’s filesystem.