mirror of
https://github.com/gobysec/GobyVuls.git
synced 2025-06-20 09:50:49 +00:00
9 lines
352 B
Markdown
9 lines
352 B
Markdown
|
# SaltStack pillar_roots.write File Write (CVE-2021-25282)
|
||
|
|
|
||
|
|
An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method is vulnerable to directory traversal.
|
||
|
|
|
||
|
|
**FOFA query rule**: [app="SALTSTACK-产品"](https://fofa.so/result?qbase64=YXBwPSJTQUxUU1RBQ0st5Lqn5ZOBIg%3D%3D)
|
||
|
|
|
||
|
|
# Demo
|
||
|
|
|
||
|
|
|