Salt Project (Vmware) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-06-27. Vendor: Vmware.

CVEs of Salt Project

• CVE-2024-22232 - CVSS 7.7 (high), 2024-06-27: A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt…
• CVE-2024-22231 - CVSS 5 (medium), 2024-06-27: Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary…