CVE-2024-22232
- Source
- https://cve.org/CVERecord?id=CVE-2024-22232
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-22232.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2024-22232
- Aliases
- Downstream
openSUSE (1)
SUSE (10)
UBUNTU (1)
- Related
- Withdrawn
- 2024-06-30T13:40:16Z
- Published
- 2024-06-27T07:15:54Z
- Modified
- 2026-07-24T18:43:28Z
- Summary
- [none]
- Details
-
A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt master’s filesystem.
- References
Affected packages
Debian:10 / salt
Package
- Name
- salt
- Purl
- pkg:deb/debian/salt?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
2018.*
2018.3.4+dfsg1-6
2018.3.4+dfsg1-6+deb10u1
2018.3.4+dfsg1-6+deb10u2
2018.3.4+dfsg1-6+deb10u3
2018.3.4+dfsg1-7
2019.*
2019.2.3+dfsg1-1
2019.2.3+dfsg1-2
Other
3000+dfsg1-1
3000+dfsg1-2
3000+dfsg1-3
3000+dfsg1-4
3001+dfsg1-1
3001+dfsg1-2
3002+dfsg1-1
3004+dfsg1-1
3004+dfsg1-2
3004+dfsg1-3
3004+dfsg1-4
3004+dfsg1-5
3004+dfsg1-6
3004+dfsg1-7
3004+dfsg1-8
3004+dfsg1-9
3004+dfsg1-10
3000.*
3000.1+dfsg1-1
3000.2+dfsg1-1
3001.*
3001.1+dfsg1-1
3001.1+dfsg1-2
3002.*
3002.1+dfsg1-1
3002.2+dfsg1-1
3002.5+dfsg1-1
3002.6+dfsg1-1
3002.6+dfsg1-2
3002.6+dfsg1-3
3002.6+dfsg1-4
3002.7+dfsg1-1
3004.*
3004.1+dfsg-1
3004.1+dfsg-2
3004.1+dfsg-2.1
3004.1+dfsg-2.2