Code injection

2013-11-0518:55:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.5%

JSON

Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe.

CPENameOperatorVersion
salteq0.8.7
salteq0.14.0
salteq0.16.3
salteq0.8.0
salteq0.15.1
salteq0.9.5
salteq0.9.8
salteq0.9.7
salteq0.7.0
salteq0.9.4

Name	Operator	Version
salt	eq	0.8.7
salt	eq	0.14.0
salt	eq	0.16.3
salt	eq	0.8.0
salt	eq	0.15.1
salt	eq	0.9.5
salt	eq	0.9.8
salt	eq	0.9.7
salt	eq	0.7.0
salt	eq	0.9.4

Rows per page:

1-10 of 311

References

docs.saltstack.com/topics/releases/0.17.1.html

www.openwall.com/lists/oss-security/2013/10/18/3