Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:apk/alpine/salt@3006.6-r0?arch=s390x&distroversion=v3.20&reponame=community

Type apk

Namespace alpine

Name salt

Version 3006.6-r0

Qualifiers

arch	s390x
distroversion	v3.20
reponame	community

Subpath

Is_vulnerable false

Next_non_vulnerable_version null

Latest_non_vulnerable_version null

Affected_by_vulnerabilities

Fixing_vulnerabilities

url VCID-32tp-s4fd-v7h2

vulnerability_id VCID-32tp-s4fd-v7h2

summary

Path traversal in saltstack
A specially crafted url can be created which leads to a directory traversal in the salt file server.
A malicious user can read an arbitrary file from a Salt master’s filesystem.

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2024-22232

reference_id

reference_type

scores

value	0.00439
scoring_system	epss
scoring_elements	0.63519
published_at	2026-06-06T12:55:00Z

value	0.00439
scoring_system	epss
scoring_elements	0.6351
published_at	2026-06-07T12:55:00Z

value	0.00439
scoring_system	epss
scoring_elements	0.63512
published_at	2026-06-05T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2024-22232

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	7.7
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_url

https://github.com/saltstack/salt

reference_id

reference_type

scores

value	7.7
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/saltstack/salt

reference_url

https://github.com/saltstack/salt/commit/e0cdb80b55123f4a024759ffcf2b3f0e0788e7ab

reference_id

reference_type

scores

value	7.7
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/saltstack/salt/commit/e0cdb80b55123f4a024759ffcf2b3f0e0788e7ab

reference_url

https://saltproject.io/security-announcements/2024-01-31-advisory

reference_id

reference_type

scores

value	7.7
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://saltproject.io/security-announcements/2024-01-31-advisory

reference_url

https://saltproject.io/security-announcements/2024-01-31-advisory/

reference_id

2024-01-31-advisory

reference_type

scores

value	7.7
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-27T14:41:55Z/

url

https://saltproject.io/security-announcements/2024-01-31-advisory/

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2024-22232

reference_id

CVE-2024-22232

reference_type

scores

value	7.7
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2024-22232

reference_url

https://github.com/advisories/GHSA-2qw3-2wv6-p64x

reference_id

GHSA-2qw3-2wv6-p64x

reference_type

scores

value	HIGH
scoring_system	cvssv3.1_qr
scoring_elements

url

https://github.com/advisories/GHSA-2qw3-2wv6-p64x

reference_url	https://security.gentoo.org/glsa/202412-09
reference_id	GLSA-202412-09
reference_type
scores
url	https://security.gentoo.org/glsa/202412-09

fixed_packages

url	pkg:apk/alpine/salt@3006.6-r0?arch=s390x&distroversion=v3.20&reponame=community
purl	pkg:apk/alpine/salt@3006.6-r0?arch=s390x&distroversion=v3.20&reponame=community
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/salt@3006.6-r0%3Farch=s390x&distroversion=v3.20&reponame=community

aliases CVE-2024-22232, GHSA-2qw3-2wv6-p64x

risk_score 4.0

exploitability 0.5

weighted_severity 8.0

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-32tp-s4fd-v7h2

url VCID-qr6n-rx38-6fd2

vulnerability_id VCID-qr6n-rx38-6fd2

summary

Directory creation by malicious user in saltstack
Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.

references

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2024-22231

reference_id

reference_type

scores

value	0.0058
scoring_system	epss
scoring_elements	0.69301
published_at	2026-06-07T12:55:00Z

value	0.0058
scoring_system	epss
scoring_elements	0.69311
published_at	2026-06-06T12:55:00Z

value	0.0058
scoring_system	epss
scoring_elements	0.69302
published_at	2026-06-05T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2024-22231

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_url

https://github.com/saltstack/salt

reference_id

reference_type

scores

value	5.0
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/saltstack/salt

reference_url

https://github.com/saltstack/salt/commit/e0cdb80b55123f4a024759ffcf2b3f0e0788e7ab

reference_id

reference_type

scores

value	5.0
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/saltstack/salt/commit/e0cdb80b55123f4a024759ffcf2b3f0e0788e7ab

reference_url

https://saltproject.io/security-announcements/2024-01-31-advisory

reference_id

reference_type

scores

value	5.0
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://saltproject.io/security-announcements/2024-01-31-advisory

reference_url

https://saltproject.io/security-announcements/2024-01-31-advisory/

reference_id

2024-01-31-advisory

reference_type

scores

value	5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-08T14:45:17Z/

url

https://saltproject.io/security-announcements/2024-01-31-advisory/

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2024-22231

reference_id

CVE-2024-22231

reference_type

scores

value	5.0
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2024-22231

reference_url

https://github.com/advisories/GHSA-q27c-j6j9-53w3

reference_id

GHSA-q27c-j6j9-53w3

reference_type

scores

value	MODERATE
scoring_system	cvssv3.1_qr
scoring_elements

url

https://github.com/advisories/GHSA-q27c-j6j9-53w3

reference_url	https://security.gentoo.org/glsa/202412-09
reference_id	GLSA-202412-09
reference_type
scores
url	https://security.gentoo.org/glsa/202412-09

fixed_packages

url	pkg:apk/alpine/salt@3006.6-r0?arch=s390x&distroversion=v3.20&reponame=community
purl	pkg:apk/alpine/salt@3006.6-r0?arch=s390x&distroversion=v3.20&reponame=community
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:apk/alpine/salt@3006.6-r0%3Farch=s390x&distroversion=v3.20&reponame=community

aliases CVE-2024-22231, GHSA-q27c-j6j9-53w3

risk_score 3.1

exploitability 0.5

weighted_severity 6.2

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qr6n-rx38-6fd2

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/salt@3006.6-r0%3Farch=s390x&distroversion=v3.20&reponame=community

Package Instance