| Package | Affected versions | Patched versions |
|---|---|---|
| salt | < 0.17.1 | 0.17.1 |
| salt | = 0.10.0= 0.10.2= 0.10.3= 0.10.4= 0.10.5= 0.11.0= 0.12.0= 0.13.0= 0.14.0= 0.15.0= 0.15.1= 0.16.0= 0.16.2= 0.16.3= 0.16.4= 0.6.0= 0.7.0= 0.8.0= 0.8.7= 0.8.8= 0.8.9= 0.9.0= 0.9.2= 0.9.3= 0.9.4= 0.9.5= 0.9.6= 0.9.7= 0.9.8= 0.9.9≤ 0.17.0 |
Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free