GHSA-r546-h3ff-q585
Salt vulnerable to directory traversal attack in minion file cache creation
Packages
Details
As written in the advisory (Markdown source, shown as plain text).
Directory traversal attack in minion file cache creation. The master's default cache is vulnerable to a directory traversal attack. Which could be leveraged to write or overwrite 'cache' files outside of the cache directory.
References
External links from the advisory. They lead to third-party sites.