A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt master’s filesystem.

A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt master’s filesystem.

A specially crafted url can be created which leads to a directory trav ...

Path traversal in saltstack

Уязвимость системы управления конфигурациями и удалённого выполнения операций Salt, связанная с созданием специальных URL-адресов, позволяющая нарушителю получить доступ к конфиденциальной информации

Security update for salt

Security update for salt

Security update for salt

Security update for salt

Security update for salt

Множественные уязвимости salt

ALT-PU-2024-4288: package `salt` update to version 3007.0-alt0.p10.1

ALT-PU-2024-2460: package `salt` update to version 3006.6-alt1