CVE-2024-22231

La creación de un directorio de caché síndico es vulnerable a un ataque de directory transversal en un proyecto Salt que puede llevar a un atacante malintencionado a crear un directorio arbitrario en un maestro Salt.

Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.

Gentoo Linux Security Advisory 202412-9 - Multiple vulnerabilities have been discovered in Salt, the worst of which can lead to arbitrary code execution. Versions greater than or equal to 3006.6 are affected.