CVE-2024-22232

Advisory

Affected versions of Salt are vulnerable to a Path Traversal vulnerability. A specially crafted URL can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt master’s filesystem.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

========================

Security
--------

- Fix CVE-2024-22231 Prevent directory traversal when creating syndic cache directory on the master.
- Fix CVE-2024-22232 Prevent directory traversal attacks in the master's serve_file method.

These vulnerablities were discovered and reported by:
Yudi Zhao(Huawei Nebula Security Lab),Chenwei Jiang(Huawei Nebula Security Lab) (565)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-22232