admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-12-31 06:50:36 +00:00
Code Issues Packages Projects Releases Wiki Activity
GobyVuls/SaltStack/CVE-2021-25282
History

README.md

SaltStack pillar_roots.write File Write (CVE-2021-25282)

An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method is vulnerable to directory traversal.

FOFA query rule: app="SALTSTACK-产品"

Demo