4.2
Moyenne
CVE-2025-22238 Directory traversal attack in minion file cache creation
Description
Directory traversal attack in minion file cache creation. The master's default cache is vulnerable to a directory traversal attack. Which could be leveraged to write or overwrite 'cache' files outside of the cache directory.
Produits et versions touchés
Références
- docs.saltproject.io docs.saltproject.io
- docs.saltproject.io docs.saltproject.io
Chronologie
- Publiée
- Dernière modification
Autres CVE de SALT
Les 11 CVE de SALT →
CVE-2024-38824
Directory traversal vulnerability in recv_file method allows arbitrary files to be written to the master cache directory
9.6
Critique
CVE-2025-22242
Worker process denial of service through file read operation
5.6
Moyenne
CVE-2025-22241
File contents overwrite the VirtKey class is called when “on-demand pillar” data is requested and uses un-validated…
5.6
Moyenne
CVE-2025-22240
Arbitrary directory creation or file deletion
6.3
Moyenne