| Package | Affected versions | Patched versions |
|---|---|---|
| salt | ≥ 3006.0, < 3006.6< 3005.5 | 3006.63005.5 |
A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt master’s filesystem.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free