Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j8fm-j268-rq9p

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe.

Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe.

EPSS

Процентиль: 80%
0.02116
Низкий

Дефекты

CWE-94

Связанные уязвимости

ubuntu
почти 13 лет назад

Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe.

nvd
почти 13 лет назад

Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe.

debian
почти 13 лет назад

Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute ...

EPSS

Процентиль: 80%
0.02116
Низкий

Дефекты

CWE-94