3 matches found
PYSEC-2026-529 Salt vulnerable to directory traversal attack in file receiving method
Directory traversal vulnerability in recvfile method allows arbitrary files to be written to the master cache directory...
9.6CVSS5.9AI score0.01008EPSS
SaveExploits0References7
UBUNTU-CVE-2024-38824
Directory traversal vulnerability in recvfile method allows arbitrary files to be written to the master cache directory...
9.6CVSS5.9AI score0.01008EPSS
SaveExploits0References4
CVE-2024-38824
CVE-2024-38824 is a directory traversal vulnerability in the recv_file method that allows writing arbitrary files into the Salt master cache directory. Public references in multiple advisories (SUSE openSUSE/SUSE-SU-2025-02501/-02492/-02476, SUSE-2025-02492, -02500, -02502) confirm the flaw affec...
9.6CVSS9.3AI score0.01008EPSS
SaveExploits0References2Affected Software1
20