Directory Traversal

salt is vulnerable to directory traversal. It uses os.stat that follows symbolic links to get targets, allowing an attacker to access other directories beyond the specified directory and change the ownership...