Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2024-22232

Disclosure Date: June 27, 2024 (last updated June 27, 2024)
A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt master’s filesystem.
0
0
Attacker Value
Unknown

CVE-2024-22231

Disclosure Date: June 27, 2024 (last updated June 27, 2024)
Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.
0
0