Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 09:44:14 +0000 CVE-2019-1010259 https://cve.radiocsirt.org/vuln/cve-2019-1010259 <p><strong>Affected:</strong> SaltStack Salt</p> <p>SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The mysql.user_chpass function from the MySQL module for Salt. The attack vector is: specially crafted password string. The fixed version is: 2018.3.4.</p> <p><strong>Affected:</strong> SaltStack Salt</p> <p>SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The mysql.user_chpass function from the MySQL module for Salt. The attack vector is: specially crafted password string. The fixed version is: 2018.3.4.</p> https://cve.radiocsirt.org/vuln/cve-2019-1010259 GHSA-h8xp-h3jf-wv4v — SaltStack Salt SQL Injection vulnerability in mysql.user_chpass function https://cve.radiocsirt.org/vuln/ghsa-h8xp-h3jf-wv4v <p><strong>Affected:</strong> PyPI: salt</p> <p>SaltStack Salt 2018.3 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The `mysql.user_chpass` function from the MySQL module for Salt (https://github.com/saltstack/salt/blob/develop/salt/modules/mysql.py#L1462). The attack vector is: specially crafted password string. The fixed version is: 2018.3.4.</p> <p><strong>Affected:</strong> PyPI: salt</p> <p>SaltStack Salt 2018.3 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The `mysql.user_chpass` function from the MySQL module for Salt (https://github.com/saltstack/salt/blob/develop/salt/modules/mysql.py#L1462). The attack vector is: specially crafted password string. The fixed version is: 2018.3.4.</p> https://cve.radiocsirt.org/vuln/ghsa-h8xp-h3jf-wv4v