4.2
Medium
CVE-2025-22238 Directory traversal attack in minion file cache creation
Description
Directory traversal attack in minion file cache creation. The master's default cache is vulnerable to a directory traversal attack. Which could be leveraged to write or overwrite 'cache' files outside of the cache directory.
Affected products and versions
Other CVEs of SALT
The 11 CVEs of SALT →
CVE-2024-38824
Directory traversal vulnerability in recv_file method allows arbitrary files to be written to the master cache directory
9.6
Critical
CVE-2025-22242
Worker process denial of service through file read operation
5.6
Medium
CVE-2025-22241
File contents overwrite the VirtKey class is called when “on-demand pillar” data is requested and uses un-validated…
5.6
Medium
CVE-2025-22240
Arbitrary directory creation or file deletion
6.3
Medium