Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j8fm-j268-rq9p

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe.

Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe.

EPSS

Процентиль: 68%
0.0057
Низкий

Дефекты

CWE-94

Связанные уязвимости

ubuntu
больше 12 лет назад

Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe.

nvd
больше 12 лет назад

Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe.

debian
больше 12 лет назад

Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute ...

EPSS

Процентиль: 68%
0.0057
Низкий

Дефекты

CWE-94