Vmware Salt Project vulnerabilities

2 vulnerabilities

Known vulnerabilities in Vmware Salt Project, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2024-22231ubuntusalt+2
EPSS score
0.69%
Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.7.7CVE-2024-22232ubuntusalt+2
EPSS score
0.84%
A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt master’s filesystem.