Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/salt@3002rc1
Typepypi
Namespace
Namesalt
Version3002rc1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version3006.17
Latest_non_vulnerable_version3007.9
Affected_by_vulnerabilities
0
url VCID-32tp-s4fd-v7h2
vulnerability_id VCID-32tp-s4fd-v7h2
summary 
Path traversal in saltstack
A specially crafted url can be created which leads to a directory traversal in the salt file server.
A malicious user can read an arbitrary file from a Salt master’s filesystem.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-22232
reference_id
reference_type
scores
0
value 0.00439
scoring_system epss
scoring_elements 0.63512
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-22232
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
3
reference_url https://github.com/saltstack/salt/commit/e0cdb80b55123f4a024759ffcf2b3f0e0788e7ab
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/commit/e0cdb80b55123f4a024759ffcf2b3f0e0788e7ab
4
reference_url https://saltproject.io/security-announcements/2024-01-31-advisory
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security-announcements/2024-01-31-advisory
5
reference_url https://saltproject.io/security-announcements/2024-01-31-advisory/
reference_id 2024-01-31-advisory
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-27T14:41:55Z/
url https://saltproject.io/security-announcements/2024-01-31-advisory/
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-22232
reference_id CVE-2024-22232
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-22232
7
reference_url https://github.com/advisories/GHSA-2qw3-2wv6-p64x
reference_id GHSA-2qw3-2wv6-p64x
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2qw3-2wv6-p64x
8
reference_url https://security.gentoo.org/glsa/202412-09
reference_id GLSA-202412-09
reference_type
scores
url https://security.gentoo.org/glsa/202412-09
fixed_packages
0
url pkg:pypi/salt@3005.5
purl pkg:pypi/salt@3005.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3005.5
1
url pkg:pypi/salt@3006.6
purl pkg:pypi/salt@3006.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-34yz-hgbf-abee
1
vulnerability VCID-em78-j177-kffg
2
vulnerability VCID-fwas-eecc-3bau
3
vulnerability VCID-fwpy-42pu-8ub3
4
vulnerability VCID-r4b7-j6au-fucm
5
vulnerability VCID-sc4b-v7j2-byed
6
vulnerability VCID-t99c-dqd5-ukfk
7
vulnerability VCID-yt34-n551-1uau
8
vulnerability VCID-zeat-rzj9-u3br
9
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.6
aliases CVE-2024-22232, GHSA-2qw3-2wv6-p64x
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-32tp-s4fd-v7h2
1
url VCID-47u4-vdsp-c3ct
vulnerability_id VCID-47u4-vdsp-c3ct
summary An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. This allows for a malicious actor to subvert the proper behaviour of the given minion software.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22004.json
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22004.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22004
reference_id
reference_type
scores
0
value 0.0014
scoring_system epss
scoring_elements 0.33796
published_at 2026-06-04T12:55:00Z
1
value 0.0014
scoring_system epss
scoring_elements 0.33901
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22004
2
reference_url https://github.com/advisories/GHSA-xf37-qcvf-7m57
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 7.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-xf37-qcvf-7m57
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-346.yaml
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-346.yaml
4
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
5
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-22004
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-22004
12
reference_url https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.5
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02
13
reference_url https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/
14
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2041836
reference_id 2041836
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2041836
fixed_packages
0
url pkg:pypi/salt@3003.3
purl pkg:pypi/salt@3003.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-8mpz-ke16-fbej
2
vulnerability VCID-ce2x-ehyk-nufk
3
vulnerability VCID-h4tm-9wqz-1qge
4
vulnerability VCID-jyxg-h3a9-8ygv
5
vulnerability VCID-k1gu-khda-jyeb
6
vulnerability VCID-nehw-r7zm-j7bb
7
vulnerability VCID-qr6n-rx38-6fd2
8
vulnerability VCID-rnh5-7394-dfea
9
vulnerability VCID-zter-3e3b-7yfb
10
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.3
aliases CVE-2021-22004, GHSA-xf37-qcvf-7m57, PYSEC-2021-346
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-47u4-vdsp-c3ct
2
url VCID-48r4-3qds-bbhv
vulnerability_id VCID-48r4-3qds-bbhv
summary In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion. The attack requires that a file is created with a pathname that is backed up by snapper, and that the master calls the snapper.diff function (which executes popen unsafely).
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-31607.json
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-31607.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-31607
reference_id
reference_type
scores
0
value 0.04548
scoring_system epss
scoring_elements 0.89391
published_at 2026-06-05T12:55:00Z
1
value 0.04548
scoring_system epss
scoring_elements 0.89372
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-31607
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://github.com/advisories/GHSA-hcjf-rp5h-g5h3
reference_id
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hcjf-rp5h-g5h3
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-56.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-56.yaml
5
reference_url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html
6
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5
7
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT
8
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LDKMAJXYFHM4USVX3H5V2GCCBGASWUSM
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LDKMAJXYFHM4USVX3H5V2GCCBGASWUSM
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LDKMAJXYFHM4USVX3H5V2GCCBGASWUSM
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LDKMAJXYFHM4USVX3H5V2GCCBGASWUSM
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LDKMAJXYFHM4USVX3H5V2GCCBGASWUSM/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LDKMAJXYFHM4USVX3H5V2GCCBGASWUSM/
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ
15
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-31607
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-31607
16
reference_url https://sec.stealthcopter.com/saltstack-snapper-minion-privledge-escaltion
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://sec.stealthcopter.com/saltstack-snapper-minion-privledge-escaltion
17
reference_url https://sec.stealthcopter.com/saltstack-snapper-minion-privledge-escaltion/
reference_id
reference_type
scores
url https://sec.stealthcopter.com/saltstack-snapper-minion-privledge-escaltion/
18
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
19
reference_url https://www.debian.org/security/2021/dsa-5011
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-5011
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1953065
reference_id 1953065
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1953065
fixed_packages
0
url pkg:pypi/salt@3002.7
purl pkg:pypi/salt@3002.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-48r4-3qds-bbhv
3
vulnerability VCID-8mpz-ke16-fbej
4
vulnerability VCID-a8kw-uehx-xfg5
5
vulnerability VCID-ce2x-ehyk-nufk
6
vulnerability VCID-h4tm-9wqz-1qge
7
vulnerability VCID-jyxg-h3a9-8ygv
8
vulnerability VCID-k1gu-khda-jyeb
9
vulnerability VCID-nehw-r7zm-j7bb
10
vulnerability VCID-qr6n-rx38-6fd2
11
vulnerability VCID-rnh5-7394-dfea
12
vulnerability VCID-saff-gz5j-8kex
13
vulnerability VCID-zter-3e3b-7yfb
14
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.7
1
url pkg:pypi/salt@3003rc1
purl pkg:pypi/salt@3003rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-a8kw-uehx-xfg5
3
vulnerability VCID-ce2x-ehyk-nufk
4
vulnerability VCID-nehw-r7zm-j7bb
5
vulnerability VCID-qr6n-rx38-6fd2
6
vulnerability VCID-rnh5-7394-dfea
7
vulnerability VCID-saff-gz5j-8kex
8
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003rc1
aliases CVE-2021-31607, GHSA-hcjf-rp5h-g5h3, PYSEC-2021-56
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-48r4-3qds-bbhv
3
url VCID-8mpz-ke16-fbej
vulnerability_id VCID-8mpz-ke16-fbej
summary An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. A minion authentication denial of service can cause a MiTM attacker to force a minion process to stop by impersonating a master.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-22935
reference_id
reference_type
scores
0
value 0.0007
scoring_system epss
scoring_elements 0.21551
published_at 2026-06-04T12:55:00Z
1
value 0.0007
scoring_system epss
scoring_elements 0.21631
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-22935
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-172.yaml
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-172.yaml
3
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
4
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31
5
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L31
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L31
6
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L29
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L29
7
reference_url https://github.com/saltstack/salt/releases,
reference_id
reference_type
scores
url https://github.com/saltstack/salt/releases,
8
reference_url https://repo.saltproject.io/
reference_id
reference_type
scores
url https://repo.saltproject.io/
9
reference_url https://saltproject.io/security_announcements/salt-security-advisory-release
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/salt-security-advisory-release
10
reference_url https://saltproject.io/security_announcements/salt-security-advisory-release/,
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/salt-security-advisory-release/,
11
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-22935
reference_id CVE-2022-22935
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-22935
13
reference_url https://github.com/advisories/GHSA-cvcc-5x92-gmhc
reference_id GHSA-cvcc-5x92-gmhc
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-cvcc-5x92-gmhc
fixed_packages
0
url pkg:pypi/salt@3002.8
purl pkg:pypi/salt@3002.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-48r4-3qds-bbhv
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-nehw-r7zm-j7bb
7
vulnerability VCID-qr6n-rx38-6fd2
8
vulnerability VCID-rnh5-7394-dfea
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.8
1
url pkg:pypi/salt@3003.4
purl pkg:pypi/salt@3003.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-ce2x-ehyk-nufk
2
vulnerability VCID-h4tm-9wqz-1qge
3
vulnerability VCID-nehw-r7zm-j7bb
4
vulnerability VCID-qr6n-rx38-6fd2
5
vulnerability VCID-rnh5-7394-dfea
6
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.4
2
url pkg:pypi/salt@3004.1
purl pkg:pypi/salt@3004.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-ce2x-ehyk-nufk
2
vulnerability VCID-h4tm-9wqz-1qge
3
vulnerability VCID-nehw-r7zm-j7bb
4
vulnerability VCID-qr6n-rx38-6fd2
5
vulnerability VCID-rnh5-7394-dfea
6
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.1
aliases CVE-2022-22935, GHSA-cvcc-5x92-gmhc, PYSEC-2022-172
risk_score 1.6
exploitability 0.5
weighted_severity 3.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8mpz-ke16-fbej
4
url VCID-a8kw-uehx-xfg5
vulnerability_id VCID-a8kw-uehx-xfg5
summary An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-21996.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-21996.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-21996
reference_id
reference_type
scores
0
value 0.02263
scoring_system epss
scoring_elements 0.84929
published_at 2026-06-04T12:55:00Z
1
value 0.02263
scoring_system epss
scoring_elements 0.84953
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-21996
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21996
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21996
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/advisories/GHSA-pf7h-h2wq-m7pg
reference_id
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pf7h-h2wq-m7pg
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-318.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-318.yaml
6
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
7
reference_url https://lists.debian.org/debian-lts-announce/2021/11/msg00017.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/11/msg00017.html
8
reference_url https://lists.debian.org/debian-lts-announce/2021/11/msg00019.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.debian.org/debian-lts-announce/2021/11/msg00019.html
9
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT
11
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ
12
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5
13
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/
14
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT
15
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/
16
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ
17
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/
reference_id
reference_type
scores
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/
18
reference_url https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02
19
reference_url https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/
20
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
21
reference_url https://www.debian.org/security/2021/dsa-5011
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.debian.org/security/2021/dsa-5011
22
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2041838
reference_id 2041838
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2041838
23
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-21996
reference_id CVE-2021-21996
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-21996
fixed_packages
0
url pkg:pypi/salt@3003.3
purl pkg:pypi/salt@3003.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-8mpz-ke16-fbej
2
vulnerability VCID-ce2x-ehyk-nufk
3
vulnerability VCID-h4tm-9wqz-1qge
4
vulnerability VCID-jyxg-h3a9-8ygv
5
vulnerability VCID-k1gu-khda-jyeb
6
vulnerability VCID-nehw-r7zm-j7bb
7
vulnerability VCID-qr6n-rx38-6fd2
8
vulnerability VCID-rnh5-7394-dfea
9
vulnerability VCID-zter-3e3b-7yfb
10
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.3
aliases CVE-2021-21996, GHSA-pf7h-h2wq-m7pg, PYSEC-2021-318
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-a8kw-uehx-xfg5
5
url VCID-ce2x-ehyk-nufk
vulnerability_id VCID-ce2x-ehyk-nufk
summary Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongful executions, data corruption and/or crash.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-20898
reference_id
reference_type
scores
0
value 0.0011
scoring_system epss
scoring_elements 0.29032
published_at 2026-06-05T12:55:00Z
1
value 0.0011
scoring_system epss
scoring_elements 0.28962
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-20898
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-169.yaml
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-169.yaml
3
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
4
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL
5
reference_url https://saltproject.io/security-announcements/2023-08-10-advisory
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security-announcements/2023-08-10-advisory
6
reference_url https://saltproject.io/security-announcements/2023-08-10-advisory/
reference_id
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:44:22Z/
url https://saltproject.io/security-announcements/2023-08-10-advisory/
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-20898
reference_id CVE-2023-20898
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-20898
8
reference_url https://github.com/advisories/GHSA-qvh6-3j7x-3hq7
reference_id GHSA-qvh6-3j7x-3hq7
reference_type
scores
url https://github.com/advisories/GHSA-qvh6-3j7x-3hq7
9
reference_url https://security.gentoo.org/glsa/202412-09
reference_id GLSA-202412-09
reference_type
scores
url https://security.gentoo.org/glsa/202412-09
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL/
reference_id OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:44:22Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL/
fixed_packages
0
url pkg:pypi/salt@3005.2
purl pkg:pypi/salt@3005.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-qr6n-rx38-6fd2
2
vulnerability VCID-rnh5-7394-dfea
3
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3005.2
1
url pkg:pypi/salt@3006.2
purl pkg:pypi/salt@3006.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-34yz-hgbf-abee
2
vulnerability VCID-em78-j177-kffg
3
vulnerability VCID-fwas-eecc-3bau
4
vulnerability VCID-fwpy-42pu-8ub3
5
vulnerability VCID-qr6n-rx38-6fd2
6
vulnerability VCID-r4b7-j6au-fucm
7
vulnerability VCID-rnh5-7394-dfea
8
vulnerability VCID-sc4b-v7j2-byed
9
vulnerability VCID-t99c-dqd5-ukfk
10
vulnerability VCID-yt34-n551-1uau
11
vulnerability VCID-zeat-rzj9-u3br
12
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.2
aliases CVE-2023-20898, GHSA-qvh6-3j7x-3hq7, PYSEC-2023-169
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ce2x-ehyk-nufk
6
url VCID-h4tm-9wqz-1qge
vulnerability_id VCID-h4tm-9wqz-1qge
summary An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an active session and salt-api users that authenticate via PAM eauth.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-22967
reference_id
reference_type
scores
0
value 0.00504
scoring_system epss
scoring_elements 0.66531
published_at 2026-06-04T12:55:00Z
1
value 0.00504
scoring_system epss
scoring_elements 0.66571
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-22967
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://github.com/advisories/GHSA-fpxm-fprw-6hxj
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-fpxm-fprw-6hxj
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-210.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-210.yaml
4
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-22967
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-22967
6
reference_url https://repo.saltproject.io
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://repo.saltproject.io
7
reference_url https://repo.saltproject.io/
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:30:14Z/
url https://repo.saltproject.io/
8
reference_url https://saltproject.io/security_announcements/salt-security-advisory-release-june-21st-2022/,
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/salt-security-advisory-release-june-21st-2022/,
9
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value 7.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:30:14Z/
url https://security.gentoo.org/glsa/202310-22
10
reference_url https://saltproject.io/security_announcements/salt-security-advisory-release-june-21st-2022/%2C
reference_id %2C
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-23T13:30:14Z/
url https://saltproject.io/security_announcements/salt-security-advisory-release-june-21st-2022/%2C
fixed_packages
0
url pkg:pypi/salt@3002.9
purl pkg:pypi/salt@3002.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-48r4-3qds-bbhv
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-nehw-r7zm-j7bb
6
vulnerability VCID-qr6n-rx38-6fd2
7
vulnerability VCID-rnh5-7394-dfea
8
vulnerability VCID-saff-gz5j-8kex
9
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.9
1
url pkg:pypi/salt@3003.5
purl pkg:pypi/salt@3003.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-ce2x-ehyk-nufk
2
vulnerability VCID-nehw-r7zm-j7bb
3
vulnerability VCID-qr6n-rx38-6fd2
4
vulnerability VCID-rnh5-7394-dfea
5
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.5
2
url pkg:pypi/salt@3004.2
purl pkg:pypi/salt@3004.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-ce2x-ehyk-nufk
2
vulnerability VCID-nehw-r7zm-j7bb
3
vulnerability VCID-qr6n-rx38-6fd2
4
vulnerability VCID-rnh5-7394-dfea
5
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.2
aliases CVE-2022-22967, GHSA-fpxm-fprw-6hxj, PYSEC-2022-210
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h4tm-9wqz-1qge
7
url VCID-jyxg-h3a9-8ygv
vulnerability_id VCID-jyxg-h3a9-8ygv
summary An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. When configured as a Master-of-Masters, with a publisher_acl, if a user configured in the publisher_acl targets any minion connected to the Syndic, the Salt Master incorrectly interpreted no valid targets as valid, allowing configured users to target any of the minions connected to the syndic with their configured commands. This requires a syndic master combined with publisher_acl configured on the Master-of-Masters, allowing users specified in the publisher_acl to bypass permissions, publishing authorized commands to any configured minion.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-22941
reference_id
reference_type
scores
0
value 0.00016
scoring_system epss
scoring_elements 0.03576
published_at 2026-06-04T12:55:00Z
1
value 0.00016
scoring_system epss
scoring_elements 0.03582
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-22941
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-174.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-174.yaml
3
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
4
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31
5
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L32
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L32
6
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L30
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L30
7
reference_url https://github.com/saltstack/salt/releases,
reference_id
reference_type
scores
url https://github.com/saltstack/salt/releases,
8
reference_url https://repo.saltproject.io
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://repo.saltproject.io
9
reference_url https://repo.saltproject.io/
reference_id
reference_type
scores
url https://repo.saltproject.io/
10
reference_url https://saltproject.io/security_announcements/salt-security-advisory-release/,
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/salt-security-advisory-release/,
11
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-22941
reference_id CVE-2022-22941
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-22941
13
reference_url https://github.com/advisories/GHSA-qcr3-hr2f-6557
reference_id GHSA-qcr3-hr2f-6557
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qcr3-hr2f-6557
fixed_packages
0
url pkg:pypi/salt@3002.8
purl pkg:pypi/salt@3002.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-48r4-3qds-bbhv
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-nehw-r7zm-j7bb
7
vulnerability VCID-qr6n-rx38-6fd2
8
vulnerability VCID-rnh5-7394-dfea
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.8
1
url pkg:pypi/salt@3003.4
purl pkg:pypi/salt@3003.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-ce2x-ehyk-nufk
2
vulnerability VCID-h4tm-9wqz-1qge
3
vulnerability VCID-nehw-r7zm-j7bb
4
vulnerability VCID-qr6n-rx38-6fd2
5
vulnerability VCID-rnh5-7394-dfea
6
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.4
2
url pkg:pypi/salt@3004.1
purl pkg:pypi/salt@3004.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-ce2x-ehyk-nufk
2
vulnerability VCID-h4tm-9wqz-1qge
3
vulnerability VCID-nehw-r7zm-j7bb
4
vulnerability VCID-qr6n-rx38-6fd2
5
vulnerability VCID-rnh5-7394-dfea
6
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.1
aliases CVE-2022-22941, GHSA-qcr3-hr2f-6557, PYSEC-2022-174
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jyxg-h3a9-8ygv
8
url VCID-k1gu-khda-jyeb
vulnerability_id VCID-k1gu-khda-jyeb
summary An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Salt Masters do not sign pillar data with the minion’s public key, which can result in attackers substituting arbitrary pillar data.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-22934
reference_id
reference_type
scores
0
value 0.0012
scoring_system epss
scoring_elements 0.30538
published_at 2026-06-04T12:55:00Z
1
value 0.0012
scoring_system epss
scoring_elements 0.30611
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-22934
1
reference_url https://blog.cloudflare.com/future-proofing-saltstack
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://blog.cloudflare.com/future-proofing-saltstack
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-171.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-171.yaml
4
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
5
reference_url https://github.com/saltstack/salt/releases
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/releases
6
reference_url https://github.com/saltstack/salt/releases,
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/releases,
7
reference_url https://repo.saltproject.io
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://repo.saltproject.io
8
reference_url https://repo.saltproject.io/
reference_id
reference_type
scores
url https://repo.saltproject.io/
9
reference_url https://saltproject.io/security_announcements/salt-security-advisory-release/,
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/salt-security-advisory-release/,
10
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-22934
reference_id CVE-2022-22934
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-22934
12
reference_url https://github.com/advisories/GHSA-2q4g-wfm6-5fpm
reference_id GHSA-2q4g-wfm6-5fpm
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2q4g-wfm6-5fpm
fixed_packages
0
url pkg:pypi/salt@3002.8
purl pkg:pypi/salt@3002.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-48r4-3qds-bbhv
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-nehw-r7zm-j7bb
7
vulnerability VCID-qr6n-rx38-6fd2
8
vulnerability VCID-rnh5-7394-dfea
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.8
1
url pkg:pypi/salt@3003.4
purl pkg:pypi/salt@3003.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-ce2x-ehyk-nufk
2
vulnerability VCID-h4tm-9wqz-1qge
3
vulnerability VCID-nehw-r7zm-j7bb
4
vulnerability VCID-qr6n-rx38-6fd2
5
vulnerability VCID-rnh5-7394-dfea
6
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.4
2
url pkg:pypi/salt@3004.1
purl pkg:pypi/salt@3004.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-ce2x-ehyk-nufk
2
vulnerability VCID-h4tm-9wqz-1qge
3
vulnerability VCID-nehw-r7zm-j7bb
4
vulnerability VCID-qr6n-rx38-6fd2
5
vulnerability VCID-rnh5-7394-dfea
6
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.1
aliases CVE-2022-22934, GHSA-2q4g-wfm6-5fpm, PYSEC-2022-171
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k1gu-khda-jyeb
9
url VCID-nehw-r7zm-j7bb
vulnerability_id VCID-nehw-r7zm-j7bb
summary Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the request server equal to the number of worker threads, the master will become unresponsive to return requests until restarted.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-20897
reference_id
reference_type
scores
0
value 0.00175
scoring_system epss
scoring_elements 0.38746
published_at 2026-06-04T12:55:00Z
1
value 0.00175
scoring_system epss
scoring_elements 0.38835
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-20897
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-166.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2023-166.yaml
3
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
4
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL
5
reference_url https://saltproject.io/security-announcements/2023-08-10-advisory
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security-announcements/2023-08-10-advisory
6
reference_url https://saltproject.io/security-announcements/2023-08-10-advisory/
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-30T17:24:32Z/
url https://saltproject.io/security-announcements/2023-08-10-advisory/
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-20897
reference_id CVE-2023-20897
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-20897
8
reference_url https://github.com/advisories/GHSA-vpjg-wmf8-29h9
reference_id GHSA-vpjg-wmf8-29h9
reference_type
scores
url https://github.com/advisories/GHSA-vpjg-wmf8-29h9
9
reference_url https://security.gentoo.org/glsa/202412-09
reference_id GLSA-202412-09
reference_type
scores
url https://security.gentoo.org/glsa/202412-09
10
reference_url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL/
reference_id OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-30T17:24:32Z/
url https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OMWJIHQZXHK6FH2E3IWAZCYIRI7FLVOL/
fixed_packages
0
url pkg:pypi/salt@3005.2
purl pkg:pypi/salt@3005.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-qr6n-rx38-6fd2
2
vulnerability VCID-rnh5-7394-dfea
3
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3005.2
1
url pkg:pypi/salt@3006.2
purl pkg:pypi/salt@3006.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-34yz-hgbf-abee
2
vulnerability VCID-em78-j177-kffg
3
vulnerability VCID-fwas-eecc-3bau
4
vulnerability VCID-fwpy-42pu-8ub3
5
vulnerability VCID-qr6n-rx38-6fd2
6
vulnerability VCID-r4b7-j6au-fucm
7
vulnerability VCID-rnh5-7394-dfea
8
vulnerability VCID-sc4b-v7j2-byed
9
vulnerability VCID-t99c-dqd5-ukfk
10
vulnerability VCID-yt34-n551-1uau
11
vulnerability VCID-zeat-rzj9-u3br
12
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.2
aliases CVE-2023-20897, GHSA-vpjg-wmf8-29h9, PYSEC-2023-166
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nehw-r7zm-j7bb
10
url VCID-qr6n-rx38-6fd2
vulnerability_id VCID-qr6n-rx38-6fd2
summary 
Directory creation by malicious user in saltstack
Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-22231
reference_id
reference_type
scores
0
value 0.0058
scoring_system epss
scoring_elements 0.69302
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-22231
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
3
reference_url https://github.com/saltstack/salt/commit/e0cdb80b55123f4a024759ffcf2b3f0e0788e7ab
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/commit/e0cdb80b55123f4a024759ffcf2b3f0e0788e7ab
4
reference_url https://saltproject.io/security-announcements/2024-01-31-advisory
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security-announcements/2024-01-31-advisory
5
reference_url https://saltproject.io/security-announcements/2024-01-31-advisory/
reference_id 2024-01-31-advisory
reference_type
scores
0
value 5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-08T14:45:17Z/
url https://saltproject.io/security-announcements/2024-01-31-advisory/
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-22231
reference_id CVE-2024-22231
reference_type
scores
0
value 5.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-22231
7
reference_url https://github.com/advisories/GHSA-q27c-j6j9-53w3
reference_id GHSA-q27c-j6j9-53w3
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-q27c-j6j9-53w3
8
reference_url https://security.gentoo.org/glsa/202412-09
reference_id GLSA-202412-09
reference_type
scores
url https://security.gentoo.org/glsa/202412-09
fixed_packages
0
url pkg:pypi/salt@3005.5
purl pkg:pypi/salt@3005.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3005.5
1
url pkg:pypi/salt@3006.6
purl pkg:pypi/salt@3006.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-34yz-hgbf-abee
1
vulnerability VCID-em78-j177-kffg
2
vulnerability VCID-fwas-eecc-3bau
3
vulnerability VCID-fwpy-42pu-8ub3
4
vulnerability VCID-r4b7-j6au-fucm
5
vulnerability VCID-sc4b-v7j2-byed
6
vulnerability VCID-t99c-dqd5-ukfk
7
vulnerability VCID-yt34-n551-1uau
8
vulnerability VCID-zeat-rzj9-u3br
9
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.6
aliases CVE-2024-22231, GHSA-q27c-j6j9-53w3
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qr6n-rx38-6fd2
11
url VCID-rnh5-7394-dfea
vulnerability_id VCID-rnh5-7394-dfea
summary 
Salt preflight script could be attacker controlled
The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script with the privileges of the user running Salt-SSH. Do not make the copy path on the target predictable and ensure we check return codes of the scp command if the copy fails.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-34049
reference_id
reference_type
scores
0
value 0.0006
scoring_system epss
scoring_elements 0.18977
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-34049
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
3
reference_url https://github.com/saltstack/salt/commit/286d55eb5a6e6bf9428405bdf5632b419bdf8444
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/commit/286d55eb5a6e6bf9428405bdf5632b419bdf8444
4
reference_url https://github.com/saltstack/salt/commit/7a14112f2a16ce70e3c3e1862c92e37af5f2c7a4
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/commit/7a14112f2a16ce70e3c3e1862c92e37af5f2c7a4
5
reference_url https://saltproject.io/security-announcements/2023-10-27-advisory
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security-announcements/2023-10-27-advisory
6
reference_url https://saltproject.io/security-announcements/2023-10-27-advisory/
reference_id 2023-10-27-advisory
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-14T15:12:53Z/
url https://saltproject.io/security-announcements/2023-10-27-advisory/
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-34049
reference_id CVE-2023-34049
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-34049
8
reference_url https://github.com/advisories/GHSA-4277-m35q-7c9w
reference_id GHSA-4277-m35q-7c9w
reference_type
scores
url https://github.com/advisories/GHSA-4277-m35q-7c9w
9
reference_url https://security.gentoo.org/glsa/202412-09
reference_id GLSA-202412-09
reference_type
scores
url https://security.gentoo.org/glsa/202412-09
fixed_packages
0
url pkg:pypi/salt@3005.4
purl pkg:pypi/salt@3005.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-qr6n-rx38-6fd2
2
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3005.4
1
url pkg:pypi/salt@3006.4
purl pkg:pypi/salt@3006.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-34yz-hgbf-abee
2
vulnerability VCID-em78-j177-kffg
3
vulnerability VCID-fwas-eecc-3bau
4
vulnerability VCID-fwpy-42pu-8ub3
5
vulnerability VCID-qr6n-rx38-6fd2
6
vulnerability VCID-r4b7-j6au-fucm
7
vulnerability VCID-sc4b-v7j2-byed
8
vulnerability VCID-t99c-dqd5-ukfk
9
vulnerability VCID-yt34-n551-1uau
10
vulnerability VCID-zeat-rzj9-u3br
11
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.4
aliases CVE-2023-34049, GHSA-4277-m35q-7c9w
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rnh5-7394-dfea
12
url VCID-saff-gz5j-8kex
vulnerability_id VCID-saff-gz5j-8kex
summary Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-33226
reference_id
reference_type
scores
0
value 0.04007
scoring_system epss
scoring_elements 0.88663
published_at 2026-06-05T12:55:00Z
1
value 0.04007
scoring_system epss
scoring_elements 0.88646
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-33226
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://github.com/saltstack/salt/blob/master/salt/modules/status.py
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-03-18T19:05:32Z/
url https://github.com/saltstack/salt/blob/master/salt/modules/status.py
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-33226
reference_id CVE-2021-33226
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-33226
4
reference_url https://bugzilla.suse.com/show_bug.cgi?id=1208473
reference_id show_bug.cgi?id=1208473
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2025-03-18T19:05:32Z/
url https://bugzilla.suse.com/show_bug.cgi?id=1208473
fixed_packages
0
url pkg:pypi/salt@3003.1
purl pkg:pypi/salt@3003.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-8mpz-ke16-fbej
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-jyxg-h3a9-8ygv
7
vulnerability VCID-k1gu-khda-jyeb
8
vulnerability VCID-nehw-r7zm-j7bb
9
vulnerability VCID-qr6n-rx38-6fd2
10
vulnerability VCID-rnh5-7394-dfea
11
vulnerability VCID-zter-3e3b-7yfb
12
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.1
aliases CVE-2021-33226, PYSEC-2023-47
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-saff-gz5j-8kex
13
url VCID-znn9-qud3-wqat
vulnerability_id VCID-znn9-qud3-wqat
summary CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25315.json
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-25315.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-25315
reference_id
reference_type
scores
0
value 0.00153
scoring_system epss
scoring_elements 0.35795
published_at 2026-06-05T12:55:00Z
1
value 0.00153
scoring_system epss
scoring_elements 0.357
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-25315
2
reference_url https://bugzilla.suse.com/show_bug.cgi?id=1182382
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.suse.com/show_bug.cgi?id=1182382
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-891.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2021-891.yaml
5
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-25315
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-25315
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1945077
reference_id 1945077
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1945077
8
reference_url https://github.com/advisories/GHSA-pmj6-9f8c-8g2m
reference_id GHSA-pmj6-9f8c-8g2m
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pmj6-9f8c-8g2m
fixed_packages
0
url pkg:pypi/salt@3002.2
purl pkg:pypi/salt@3002.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ds7-ga65-r3b6
1
vulnerability VCID-2h9s-fgnc-1qeg
2
vulnerability VCID-32tp-s4fd-v7h2
3
vulnerability VCID-47u4-vdsp-c3ct
4
vulnerability VCID-48r4-3qds-bbhv
5
vulnerability VCID-5hr1-5aec-43h3
6
vulnerability VCID-65p4-5x86-y3fj
7
vulnerability VCID-6cfw-9xe8-43d6
8
vulnerability VCID-8mpz-ke16-fbej
9
vulnerability VCID-a8kw-uehx-xfg5
10
vulnerability VCID-ce2x-ehyk-nufk
11
vulnerability VCID-h4tm-9wqz-1qge
12
vulnerability VCID-jyxg-h3a9-8ygv
13
vulnerability VCID-k1gu-khda-jyeb
14
vulnerability VCID-mbpz-g2vs-tqc1
15
vulnerability VCID-neby-tsrt-ryg5
16
vulnerability VCID-nehw-r7zm-j7bb
17
vulnerability VCID-p4xa-ks7v-wbay
18
vulnerability VCID-qr6n-rx38-6fd2
19
vulnerability VCID-rnh5-7394-dfea
20
vulnerability VCID-saff-gz5j-8kex
21
vulnerability VCID-v43a-k2bg-wkbz
22
vulnerability VCID-w2qv-hbsf-xyfh
23
vulnerability VCID-x3ph-1zkx-kbbf
24
vulnerability VCID-zter-3e3b-7yfb
25
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.2
aliases CVE-2021-25315, GHSA-pmj6-9f8c-8g2m, PYSEC-2021-891
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-znn9-qud3-wqat
14
url VCID-zter-3e3b-7yfb
vulnerability_id VCID-zter-3e3b-7yfb
summary An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying job publishes causing minions to run old jobs. File server replies can also be re-played. A sufficient craft attacker could gain root access on minion under certain scenarios.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-22936
reference_id
reference_type
scores
0
value 0.00107
scoring_system epss
scoring_elements 0.28526
published_at 2026-06-04T12:55:00Z
1
value 0.00107
scoring_system epss
scoring_elements 0.28599
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-22936
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-173.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2022-173.yaml
3
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
4
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3002.8.rst#L31
5
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L32
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3003.4.rst#L32
6
reference_url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L30
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/3004.1.rst#L30
7
reference_url https://github.com/saltstack/salt/releases
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/releases
8
reference_url https://github.com/saltstack/salt/releases,
reference_id
reference_type
scores
url https://github.com/saltstack/salt/releases,
9
reference_url https://repo.saltproject.io
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://repo.saltproject.io
10
reference_url https://repo.saltproject.io/
reference_id
reference_type
scores
url https://repo.saltproject.io/
11
reference_url https://saltproject.io/security_announcements/salt-security-advisory-release
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://saltproject.io/security_announcements/salt-security-advisory-release
12
reference_url https://saltproject.io/security_announcements/salt-security-advisory-release/,
reference_id
reference_type
scores
url https://saltproject.io/security_announcements/salt-security-advisory-release/,
13
reference_url https://security.gentoo.org/glsa/202310-22
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.gentoo.org/glsa/202310-22
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-22936
reference_id CVE-2022-22936
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-22936
15
reference_url https://github.com/advisories/GHSA-5r3f-3m3j-wcj2
reference_id GHSA-5r3f-3m3j-wcj2
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5r3f-3m3j-wcj2
fixed_packages
0
url pkg:pypi/salt@3002.8
purl pkg:pypi/salt@3002.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-47u4-vdsp-c3ct
2
vulnerability VCID-48r4-3qds-bbhv
3
vulnerability VCID-a8kw-uehx-xfg5
4
vulnerability VCID-ce2x-ehyk-nufk
5
vulnerability VCID-h4tm-9wqz-1qge
6
vulnerability VCID-nehw-r7zm-j7bb
7
vulnerability VCID-qr6n-rx38-6fd2
8
vulnerability VCID-rnh5-7394-dfea
9
vulnerability VCID-saff-gz5j-8kex
10
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002.8
1
url pkg:pypi/salt@3003.4
purl pkg:pypi/salt@3003.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-ce2x-ehyk-nufk
2
vulnerability VCID-h4tm-9wqz-1qge
3
vulnerability VCID-nehw-r7zm-j7bb
4
vulnerability VCID-qr6n-rx38-6fd2
5
vulnerability VCID-rnh5-7394-dfea
6
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3003.4
2
url pkg:pypi/salt@3004.1
purl pkg:pypi/salt@3004.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32tp-s4fd-v7h2
1
vulnerability VCID-ce2x-ehyk-nufk
2
vulnerability VCID-h4tm-9wqz-1qge
3
vulnerability VCID-nehw-r7zm-j7bb
4
vulnerability VCID-qr6n-rx38-6fd2
5
vulnerability VCID-rnh5-7394-dfea
6
vulnerability VCID-zudw-npmj-2qe8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3004.1
aliases CVE-2022-22936, GHSA-5r3f-3m3j-wcj2, PYSEC-2022-173
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zter-3e3b-7yfb
15
url VCID-zudw-npmj-2qe8
vulnerability_id VCID-zudw-npmj-2qe8
summary 
Salt junos Module Vulnerable to Code Injection via Specially Crafted YAML Payload
Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-62348
reference_id
reference_type
scores
0
value 7e-05
scoring_system epss
scoring_elements 0.0065
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-62348
1
reference_url https://docs.saltproject.io/en/latest/topics/releases/3006.17.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-01-30T19:30:12Z/
url https://docs.saltproject.io/en/latest/topics/releases/3006.17.html
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://github.com/saltstack/salt
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt
4
reference_url https://github.com/saltstack/salt/issues/68469
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/issues/68469
5
reference_url https://github.com/saltstack/salt/pull/68472/commits/c17fd645edef208233dcac855615fced69409a00
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/saltstack/salt/pull/68472/commits/c17fd645edef208233dcac855615fced69409a00
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-62348
reference_id CVE-2025-62348
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 7.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-62348
7
reference_url https://github.com/advisories/GHSA-77w2-v593-vxvv
reference_id GHSA-77w2-v593-vxvv
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-77w2-v593-vxvv
fixed_packages
0
url pkg:pypi/salt@3006.17
purl pkg:pypi/salt@3006.17
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/salt@3006.17
aliases CVE-2025-62348, GHSA-77w2-v593-vxvv
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zudw-npmj-2qe8
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/salt@3002rc1