CVE-2019-1010259

SaltStack Salt 2018.3 and 2019.2 are affected by a SQL Injection in the MySQL module, specifically the mysql.user_chpass function. The underlying issue allows an attacker to escalate privileges on a cloud-deployed MySQL server, potentially leading to remote code execution. The attack vector is a ...