Components Vulnerabilities Pricing MCP API

salt 3005.4 | Vulnerabilities | Sonatype Guide

salt

3005.4

salt 3005.4

PublishedOct 27, 2023•Policy

compliance

Developer Trust Score

N/A

Recommended Version:x.y.z

Latest version with 0 known vulnerabilities that meets your policy.

Compare Versions

Severity

Critical (0)

High (0)

Medium (17)

Low (0)

CVSS Score

0.010.0

EPSS Score

0.01.0

Malware

KEV StatusPublished

5.1CVE-2024-38823

Salt's request server is vulnerable to replay attacks when not using a TLS encrypted transport.

PublishedJun 17, 2025

5.4CVE-2025-22240

Arbitrary directory creation or file deletion. In the find_file method of the GitFS class, a path is created using os.path.join using unvalidated input from the “tgt_env” variable. This can be exploited by an attacker to delete any file on the Master's process has permissions to.

PublishedJun 14, 2025

5.3CVE-2024-38825

The salt.auth.pki module does not properly authenticate callers. The "password" field contains a public certificate which is validated against a CA certificate by the module. This is not pki authentication, as the caller does not need access to the corresponding private key for the authentication attempt to be accepted.

PublishedJun 13, 2025

4.8CVE-2025-22241

File contents overwrite the VirtKey class is called when “on-demand pillar” data is requested and uses un-validated input to create paths to the “pki directory”. The functionality is used to auto-accept Minion authentication keys based on a pre-placed “authorization file” at a specific location and is present in the default configuration.

PublishedJun 13, 2025

5.1CVE-2024-38822

Multiple methods in the salt master skip minion token validation. Therefore a misbehaving minion can impersonate another minion.

PublishedJun 13, 2025

5.2CVE-2025-22238

Directory traversal attack in minion file cache creation. The master's default cache is vulnerable to a directory traversal attack. Which could be leveraged to write or overwrite 'cache' files outside of the cache directory.

PublishedJun 13, 2025

5.3CVE-2024-22231

Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.

PublishedNov 25, 2024

6.1CVE-2019-11358

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

5.3sonatype-2020-0936

salt - Man-in-the-Middle (MITM) Leads to Remote Code Execution (RCE)

PublishedSep 24, 2020

6.1CVE-2020-11023EXPLOITED

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

6.1sonatype-2020-0187

jQuery - Cross-Site Scripting (XSS)

6.1CVE-2019-8331

In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

6.1CVE-2018-14040

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

6.1sonatype-2017-0506

browser-jquery - Cross Site Scripting (XSS)

6.5sonatype-2014-0026

jQuery - Cross-Site Scripting (XSS)

5.4sonatype-2016-0129

bootstrap - Cross Site Scripting (XSS) in data-target attribute

6.1sonatype-2016-0107

jQuery - Cross-Site Scripting (XSS) [CVE-2015-9251]

Published

Jul 29, 2022

PublishedApr 30, 2020

Apr 14, 2020

Published

Feb 22, 2019

Published

Jul 31, 2018

Published

Jun 26, 2018

Mar 28, 2017

Published

Mar 28, 2017

Published

Mar 28, 2017