A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt master’s filesystem.

Affected: PyPI: salt

A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt master’s filesystem.

python3-salt-3006.0-7.1 on GA media

Affected: PyPI: salt

A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt master’s filesystem.

Security update for SUSE Manager Salt Bundle

Affected: Ubuntu:Pro:14.04:LTS: salt, Ubuntu:Pro:16.04:LTS: salt, Ubuntu:Pro:18.04:LTS: salt, Ubuntu:22.04:LTS: salt

A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt master’s filesystem.

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in SaltStack Salt ausnutzen, um Dateien zu manipulieren oder vertrauliche Informationen offenzulegen.