{"id":"CVE-2024-22232","aliases":["ALPINE-CVE-2024-22232","EUVD-2024-1887","GHSA-2qw3-2wv6-p64x","PYSEC-2026-1891","SUSE-EL-9-CLIENT-TOOLS-2024-1525","SUSE-SU-2024:0506-1","SUSE-SU-2024:0507-1","SUSE-SU-2024:0508-1","SUSE-SU-2024:0509-1","SUSE-SU-2024:0510-1","SUSE-SU-2024:0513-1","SUSE-SU-2024:1517-1","SUSE-SU-2024:1518-1","SUSE-SU-2024:1525-1","UBUNTU-CVE-2024-22232","openSUSE-SU-2024:13650-1"],"status":"published","title":"Specially crafted url can be created which leads to a directory traversal in the salt file server","description":"A specially crafted url can be created which leads to a directory traversal in the salt file server.\nA malicious user can read an arbitrary file from a Salt master’s filesystem.","severity":{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00837,"percentile":0.58067,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-22"],"published":"2024-02-15T13:40:54Z","modified":"2026-11-03T06:32:59Z","fixes":[{"ecosystem":"PyPI","package":"salt","fixed_in":["3005.5","3006.6"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.20","package":"salt","fixed_in":["3006.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"salt","fixed_in":["3006.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"salt","fixed_in":["3006.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"salt","fixed_in":["3006.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"salt","fixed_in":["3006.6-r0"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3005.5"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3006.0"},{"fixed":"3006.6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.6-r0"}]}]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3005.5"}]}],"versions":["0.10.0","0.10.1","0.10.2","0.10.3","0.10.4","0.10.5","0.11.0","0.11.1","0.12.0","0.12.1","0.13.0","0.13.1","0.13.2","0.13.3","0.14.0","0.14.1","0.15.0","0.15.1","0.15.2","0.15.3","0.15.90","0.16.0","0.16.1","0.16.2","0.16.3","0.16.4","0.17.0","0.17.0rc1","0.17.1","0.17.2","0.17.3","0.17.4","0.17.5","0.8.7","0.8.9","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","0.9.7","0.9.8","0.9.9","0.9.9.1","2014.1.0","2014.1.0rc1","2014.1.0rc2","2014.1.0rc3","2014.1.1","2014.1.10","2014.1.11","2014.1.12","2014.1.13","2014.1.2","2014.1.3","2014.1.4","2014.1.5","2014.1.6","2014.1.7","2014.1.8","2014.1.9","2014.7.0","2014.7.0rc1","2014.7.0rc2","2014.7.0rc3","2014.7.0rc4","2014.7.0rc5","2014.7.0rc6","2014.7.0rc7","2014.7.1","2014.7.2","2014.7.3","2014.7.4","2014.7.5","2014.7.6","2014.7.7","2015.2.0rc1","2015.2.0rc2","2015.5.0","2015.5.1","2015.5.10","2015.5.11","2015.5.2","2015.5.3","2015.5.4","2015.5.5","2015.5.6","2015.5.7","2015.5.8","2015.5.9","2015.8.0","2015.8.0rc1","2015.8.0rc2","2015.8.0rc3","2015.8.0rc4","2015.8.0rc5","2015.8.1","2015.8.10","2015.8.11","2015.8.12","2015.8.13","2015.8.2","2015.8.3","2015.8.4","2015.8.5","2015.8.7","2015.8.8","2015.8.8.2","2015.8.9","2016.11.0","2016.11.0rc1","2016.11.0rc2","2016.11.1","2016.11.10","2016.11.2","2016.11.3","2016.11.4","2016.11.5","2016.11.6","2016.11.7","2016.11.8","2016.11.9","2016.3.0","2016.3.0rc2","2016.3.0rc3","2016.3.1","2016.3.2","2016.3.3","2016.3.4","2016.3.5","2016.3.6","2016.3.7","2016.3.8","2017.7.0","2017.7.0rc1","2017.7.1","2017.7.2","2017.7.3","2017.7.4","2017.7.5","2017.7.6","2017.7.7","2017.7.8","2018.3.0","2018.3.0rc1","2018.3.1","2018.3.2","2018.3.3","2018.3.4","2018.3.5","2019.2.0","2019.2.0rc1","2019.2.0rc2","2019.2.1","2019.2.2","2019.2.3","2019.2.4","2019.2.5","2019.2.6","2019.2.7","2019.2.8","3000","3000.0.0rc1","3000.0.0rc2","3000.1","3000.2","3000.3","3000.4","3000.5","3000.6","3000.7","3000.8","3000.9","3001","3001.1","3001.2","3001.3","3001.4","3001.5","3001.6","3001.7","3001.8","3001rc1","3002","3002.1","3002.2","3002.3","3002.4","3002.5","3002.6","3002.7","3002.8","3002.9","3002rc1","3003","3003.1","3003.2","3003.3","3003.4","3003.5","3003rc1","3004","3004.1","3004.2","3004rc1","3005","3005.1","3005.2","3005.3","3005.4","3005rc1","3005rc2"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3006.0"},{"fixed":"3006.6"}]}],"versions":["3006.0","3006.1","3006.2","3006.3","3006.4","3006.5"]},{"source":"osv","ecosystem":"PyPI","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3005.5"},{"introduced":"3006.0"},{"fixed":"3006.6"}]}],"versions":["0.10.0","0.10.1","0.10.2","0.10.3","0.10.4","0.10.5","0.11.0","0.11.1","0.12.0","0.12.1","0.13.0","0.13.1","0.13.2","0.13.3","0.14.0","0.14.1","0.15.0","0.15.1","0.15.2","0.15.3","0.15.90","0.16.0","0.16.1","0.16.2","0.16.3","0.16.4","0.17.0","0.17.0rc1","0.17.1","0.17.2","0.17.3","0.17.4","0.17.5","0.8.7","0.8.9","0.9.0","0.9.1","0.9.2","0.9.3","0.9.4","0.9.5","0.9.6","0.9.7","0.9.8","0.9.9","0.9.9.1","2014.1.0","2014.1.0rc1","2014.1.0rc2","2014.1.0rc3","2014.1.1","2014.1.10","2014.1.11","2014.1.12","2014.1.13","2014.1.2","2014.1.3","2014.1.4","2014.1.5","2014.1.6","2014.1.7","2014.1.8","2014.1.9","2014.7.0","2014.7.0rc1","2014.7.0rc2","2014.7.0rc3","2014.7.0rc4","2014.7.0rc5","2014.7.0rc6","2014.7.0rc7","2014.7.1","2014.7.2","2014.7.3","2014.7.4","2014.7.5","2014.7.6","2014.7.7","2015.2.0rc1","2015.2.0rc2","2015.5.0","2015.5.1","2015.5.10","2015.5.11","2015.5.2","2015.5.3","2015.5.4","2015.5.5","2015.5.6","2015.5.7","2015.5.8","2015.5.9","2015.8.0","2015.8.0rc1","2015.8.0rc2","2015.8.0rc3","2015.8.0rc4","2015.8.0rc5","2015.8.1","2015.8.10","2015.8.11","2015.8.12","2015.8.13","2015.8.2","2015.8.3","2015.8.4","2015.8.5","2015.8.7","2015.8.8","2015.8.8.2","2015.8.9","2016.11.0","2016.11.0rc1","2016.11.0rc2","2016.11.1","2016.11.10","2016.11.2","2016.11.3","2016.11.4","2016.11.5","2016.11.6","2016.11.7","2016.11.8","2016.11.9","2016.3.0","2016.3.0rc2","2016.3.0rc3","2016.3.1","2016.3.2","2016.3.3","2016.3.4","2016.3.5","2016.3.6","2016.3.7","2016.3.8","2017.7.0","2017.7.0rc1","2017.7.1","2017.7.2","2017.7.3","2017.7.4","2017.7.5","2017.7.6","2017.7.7","2017.7.8","2018.3.0","2018.3.0rc1","2018.3.1","2018.3.2","2018.3.3","2018.3.4","2018.3.5","2019.2.0","2019.2.0rc1","2019.2.0rc2","2019.2.1","2019.2.2","2019.2.3","2019.2.4","2019.2.5","2019.2.6","2019.2.7","2019.2.8","3000","3000.0.0rc1","3000.0.0rc2","3000.1","3000.2","3000.3","3000.4","3000.5","3000.6","3000.7","3000.8","3000.9","3001","3001.1","3001.2","3001.3","3001.4","3001.5","3001.6","3001.7","3001.8","3001rc1","3002","3002.1","3002.2","3002.3","3002.4","3002.5","3002.6","3002.7","3002.8","3002.9","3002rc1","3003","3003.1","3003.2","3003.3","3003.4","3003.5","3003rc1","3004","3004.1","3004.2","3004rc1","3005","3005.1","3005.2","3005.3","3005.4","3005rc1","3005rc2","3006.0","3006.1","3006.2","3006.3","3006.4","3006.5"]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.36.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150100.117.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150100.117.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150200.118.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150200.118.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150200.118.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.70.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.70.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.70.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.70.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.70.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150300.53.70.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.54.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.54.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.54.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.54.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.54.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.54.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.54.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.54.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.54.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150400.8.54.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Transactional Server 15 SP5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150500.4.29.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.11-150400.3.79.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"release-notes-susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.11-150400.3.100.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 12","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-3.52.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.54.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.54.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.54.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-150000.3.54.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.14-1.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.14-1.20.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"saltbundlepy-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.3-1.15.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:EL-9:Update:Products:SaltBundle:Update","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.36.3"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for RHEL, Liberty and Clones 9-CLIENT-TOOLS","package":"venv-salt-minion","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3006.0-1.36.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.16.0-1","0.16.4-2","0.17.1+dfsg-1","0.17.2-1","0.17.2-2","0.17.2-3","0.17.4-1","0.17.4-2","0.17.5-1","0.17.5+ds-1","0.17.5+ds-1ubuntu0.1~esm1","0.17.5+ds-1ubuntu0.1~esm2","0.17.5+ds-1ubuntu0.1~esm4","0.17.5+ds-1ubuntu0.1~esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2015.5.3+ds-1","2015.8.1+ds-2","2015.8.3+ds-1","2015.8.3+ds-2","2015.8.3+ds-3","2015.8.5+ds-1","2015.8.7+ds-1","2015.8.8+ds-1","2015.8.8+ds-1ubuntu0.1~esm1","2015.8.8+ds-1ubuntu0.1","2015.8.8+ds-1ubuntu0.1+esm1","2015.8.8+ds-1ubuntu0.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2016.11.5+ds-1","2016.11.8+dfsg1-1","2017.7.2+dfsg1-2ubuntu1","2017.7.3+dfsg1-1","2017.7.4+dfsg1-1","2017.7.4+dfsg1-1ubuntu18.04.1","2017.7.4+dfsg1-1ubuntu18.04.2","2017.7.4+dfsg1-1ubuntu18.04.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3002.6+dfsg1-4","3002.7+dfsg1-1","3004+dfsg1-4","3004+dfsg1-5","3004+dfsg1-6ubuntu1","3004+dfsg1-7","3004+dfsg1-8","3004.1+dfsg-2"]}],"products":[{"vendor":"vmware","product":"salt project"}],"references":[{"url":"https://saltproject.io/security-announcements/2024-01-31-advisory/","tags":["x_transferred","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22232","tags":["advisory"]},{"url":"https://saltproject.io/security-announcements/2024-01-31-advisory","tags":["web"]},{"url":"https://github.com/saltstack/salt/commit/e0cdb80b55123f4a024759ffcf2b3f0e0788e7ab","tags":["web"]},{"url":"https://github.com/advisories/GHSA-2qw3-2wv6-p64x","tags":["advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-22232","tags":["advisory"]},{"url":"https://github.com/saltstack/salt","tags":["package"]},{"url":"https://pypi.org/project/salt","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement//suse-el-9-client-tools-2024-1525/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1211649","tags":["report"]},{"url":"https://bugzilla.suse.com/1211888","tags":["report"]},{"url":"https://bugzilla.suse.com/1216850","tags":["report"]},{"url":"https://bugzilla.suse.com/1218482","tags":["report"]},{"url":"https://bugzilla.suse.com/1219001","tags":["report"]},{"url":"https://bugzilla.suse.com/1219430","tags":["report"]},{"url":"https://bugzilla.suse.com/1219431","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-22231","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-22232","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240506-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1193948","tags":["report"]},{"url":"https://bugzilla.suse.com/1215963","tags":["report"]},{"url":"https://bugzilla.suse.com/1216284","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240507-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240508-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240509-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240510-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240513-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1170848","tags":["report"]},{"url":"https://bugzilla.suse.com/1210911","tags":["report"]},{"url":"https://bugzilla.suse.com/1211254","tags":["report"]},{"url":"https://bugzilla.suse.com/1211560","tags":["report"]},{"url":"https://bugzilla.suse.com/1211912","tags":["report"]},{"url":"https://bugzilla.suse.com/1213079","tags":["report"]},{"url":"https://bugzilla.suse.com/1213507","tags":["report"]},{"url":"https://bugzilla.suse.com/1213738","tags":["report"]},{"url":"https://bugzilla.suse.com/1213981","tags":["report"]},{"url":"https://bugzilla.suse.com/1214077","tags":["report"]},{"url":"https://bugzilla.suse.com/1214791","tags":["report"]},{"url":"https://bugzilla.suse.com/1215166","tags":["report"]},{"url":"https://bugzilla.suse.com/1215514","tags":["report"]},{"url":"https://bugzilla.suse.com/1215769","tags":["report"]},{"url":"https://bugzilla.suse.com/1215810","tags":["report"]},{"url":"https://bugzilla.suse.com/1215813","tags":["report"]},{"url":"https://bugzilla.suse.com/1215982","tags":["report"]},{"url":"https://bugzilla.suse.com/1216114","tags":["report"]},{"url":"https://bugzilla.suse.com/1216394","tags":["report"]},{"url":"https://bugzilla.suse.com/1216437","tags":["report"]},{"url":"https://bugzilla.suse.com/1216550","tags":["report"]},{"url":"https://bugzilla.suse.com/1216657","tags":["report"]},{"url":"https://bugzilla.suse.com/1216753","tags":["report"]},{"url":"https://bugzilla.suse.com/1216781","tags":["report"]},{"url":"https://bugzilla.suse.com/1216988","tags":["report"]},{"url":"https://bugzilla.suse.com/1217069","tags":["report"]},{"url":"https://bugzilla.suse.com/1217209","tags":["report"]},{"url":"https://bugzilla.suse.com/1217588","tags":["report"]},{"url":"https://bugzilla.suse.com/1217784","tags":["report"]},{"url":"https://bugzilla.suse.com/1217869","tags":["report"]},{"url":"https://bugzilla.suse.com/1218019","tags":["report"]},{"url":"https://bugzilla.suse.com/1218074","tags":["report"]},{"url":"https://bugzilla.suse.com/1218075","tags":["report"]},{"url":"https://bugzilla.suse.com/1218089","tags":["report"]},{"url":"https://bugzilla.suse.com/1218094","tags":["report"]},{"url":"https://bugzilla.suse.com/1218146","tags":["report"]},{"url":"https://bugzilla.suse.com/1218490","tags":["report"]},{"url":"https://bugzilla.suse.com/1218615","tags":["report"]},{"url":"https://bugzilla.suse.com/1218669","tags":["report"]},{"url":"https://bugzilla.suse.com/1218849","tags":["report"]},{"url":"https://bugzilla.suse.com/1219577","tags":["report"]},{"url":"https://bugzilla.suse.com/1219850","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-32189","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241517-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241518-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241525-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-22232","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-22232","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-22232","title":"Specially crafted url can be created which leads to a directory traversal in the salt file server","description":"A specially crafted url can be created which leads to a directory traversal in the salt file server.\nA malicious user can read an arbitrary file from a Salt master’s filesystem.","status":"published","published":"2024-06-27T06:54:08.785Z","modified":"2024-11-05T15:22:05.62Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:34:00.254134Z"}],"euvd":[{"id":"EUVD-2024-1887","description":"A specially crafted url can be created which leads to a directory traversal in the salt file server.\nA malicious user can read an arbitrary file from a Salt master’s filesystem.","status":"published","published":"2024-06-27T06:54:08Z","modified":"2024-11-05T15:22:05Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-03T00:05:11.298723Z"}],"ghsa":[{"id":"GHSA-2qw3-2wv6-p64x","title":"Path traversal in saltstack","description":"A specially crafted url can be created which leads to a directory traversal in the salt file server.\nA malicious user can read an arbitrary file from a Salt master’s filesystem.","status":"published","published":"2024-06-27T09:30:39Z","modified":"2024-06-27T17:48:32Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:37:55.455438Z"}],"nvd":[{"id":"CVE-2024-22232","description":"A specially crafted url can be created which leads to a directory traversal in the salt file server.\nA malicious user can read an arbitrary file from a Salt master’s filesystem.","status":"published","published":"2024-06-27T07:15:54.227Z","modified":"2026-06-17T07:10:59.71Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:10:09.388795Z"}],"osv":[{"id":"ALPINE-CVE-2024-22232","description":"A specially crafted url can be created which leads to a directory traversal in the salt file server.\nA malicious user can read an arbitrary file from a Salt master’s filesystem.","status":"published","published":"2024-06-27T07:15:54.227Z","modified":"2026-11-03T06:32:59.791130416Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"GHSA-2qw3-2wv6-p64x","title":"Path traversal in saltstack","description":"A specially crafted url can be created which leads to a directory traversal in the salt file server.\nA malicious user can read an arbitrary file from a Salt master’s filesystem.","status":"published","published":"2024-06-27T09:30:39Z","modified":"2026-07-07T17:57:02.395863275Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:46:34.700741Z"},{"id":"PYSEC-2026-1891","title":"Path traversal in saltstack","description":"A specially crafted url can be created which leads to a directory traversal in the salt file server.\nA malicious user can read an arbitrary file from a Salt master’s filesystem.","status":"published","published":"2026-07-07T14:34:35.573683Z","modified":"2026-07-07T17:47:49.337369282Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:52:55.06457Z"},{"id":"UBUNTU-CVE-2024-22232","description":"A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt master’s filesystem.","status":"published","published":"2024-06-27T07:15:00Z","modified":"2026-04-08T14:30:23.223834Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:54:42.68848Z"},{"id":"openSUSE-SU-2024:13650-1","title":"python3-salt-3006.0-7.1 on GA media","description":"These are all security issues fixed in the python3-salt-3006.0-7.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:22:50.755192Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"SUSE-EL-9-CLIENT-TOOLS-2024-1525","title":"Security update for SUSE Manager Salt Bundle","description":"\nThis update fixes the following issues:\n\nvenv-salt-minion:\n\n- CVE-2024-22231: Prevent directory traversal when creating syndic cache directory\n  on the master (bsc#1219430)\n- CVE-2024-22232: Prevent directory traversal attacks in the master's serve_file\n  method (bsc#1219431)\n- Convert oscap output to UTF-8\n- Make Salt compatible with Python 3.11\n- Ignore non-ascii chars in oscap output (bsc#1219001)\n- Fix detected issues in Salt tests when running on VMs\n- Make importing seco.range thread safe (bsc#1211649)\n- Fix problematic tests and allow smooth tests executions on containers\n- Discover Ansible playbook files as '*.yml' or '*.yaml' files (bsc#1211888)\n- Prevent exceptions with fileserver.update when called via state (bsc#1218482)\n- Improve pip target override condition with VENV_PIP_TARGET\n  environment variable (bsc#1216850)\n- Fixed KeyError in logs when running a state that fails\n\n","status":"published","published":"2024-05-06T09:50:25Z","modified":"2026-07-24T18:24:19.302418505Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2024:0506-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2024-22231: Prevent directory traversal when creating syndic cache directory\n  on the master (bsc#1219430)\n- CVE-2024-22232: Prevent directory traversal attacks in the master's serve_file\n  method (bsc#1219431)\n\nBugs fixed:\n\n- Ensure that pillar refresh loads beacons from pillar without restart\n- Fix the aptpkg.py unit test failure\n- Prefer unittest.mock to python-mock in test suite\n- Enable 'KeepAlive' probes for Salt SSH executions (bsc#1211649)\n- Revert changes to set Salt configured user early in the stack (bsc#1216284)\n- Align behavior of some modules when using salt-call via symlink (bsc#1215963)\n- Fix gitfs '__env__' and improve cache cleaning (bsc#1193948)\n- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed\n","status":"published","published":"2024-02-15T13:40:54Z","modified":"2026-02-04T03:47:33.602035Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0507-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2024-22231: Prevent directory traversal when creating syndic cache directory\n  on the master (bsc#1219430)\n- CVE-2024-22232: Prevent directory traversal attacks in the master's serve_file\n  method (bsc#1219431)\n\nBugs fixed:\n\n- Ensure that pillar refresh loads beacons from pillar without restart\n- Fix the aptpkg.py unit test failure\n- Prefer unittest.mock to python-mock in test suite\n- Enable 'KeepAlive' probes for Salt SSH executions (bsc#1211649)\n- Revert changes to set Salt configured user early in the stack (bsc#1216284)\n- Align behavior of some modules when using salt-call via symlink (bsc#1215963)\n- Fix gitfs '__env__' and improve cache cleaning (bsc#1193948)\n- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed\n","status":"published","published":"2024-02-15T13:41:05Z","modified":"2026-02-04T02:46:13.89608Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0508-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2024-22231: Prevent directory traversal when creating syndic cache directory\n  on the master (bsc#1219430)\n- CVE-2024-22232: Prevent directory traversal attacks in the master's serve_file\n  method (bsc#1219431)\n\nBugs fixed:\n\n- Ensure that pillar refresh loads beacons from pillar without restart\n- Fix the aptpkg.py unit test failure\n- Prefer unittest.mock to python-mock in test suite\n- Enable 'KeepAlive' probes for Salt SSH executions (bsc#1211649)\n- Revert changes to set Salt configured user early in the stack (bsc#1216284)\n- Align behavior of some modules when using salt-call via symlink (bsc#1215963)\n- Fix gitfs '__env__' and improve cache cleaning (bsc#1193948)\n- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed\n","status":"published","published":"2024-02-15T13:41:28Z","modified":"2026-02-04T04:26:51.272923Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0509-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2024-22231: Prevent directory traversal when creating syndic cache directory\n  on the master (bsc#1219430)\n- CVE-2024-22232: Prevent directory traversal attacks in the master's serve_file\n  method (bsc#1219431)\n\nBugs fixed:\n\n- Ensure that pillar refresh loads beacons from pillar without restart\n- Fix the aptpkg.py unit test failure\n- Prefer unittest.mock to python-mock in test suite\n- Enable 'KeepAlive' probes for Salt SSH executions (bsc#1211649)\n- Revert changes to set Salt configured user early in the stack (bsc#1216284)\n- Align behavior of some modules when using salt-call via symlink (bsc#1215963)\n- Fix gitfs '__env__' and improve cache cleaning (bsc#1193948)\n- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed\n","status":"published","published":"2024-02-15T13:41:59Z","modified":"2025-05-02T04:36:26.159172Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0510-1","title":"Security update for salt","description":"This update for salt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2024-22231: Prevent directory traversal when creating syndic cache directory\n  on the master (bsc#1219430)\n- CVE-2024-22232: Prevent directory traversal attacks in the master's serve_file\n  method (bsc#1219431)\n\nBugs fixed:\n\n- Ensure that pillar refresh loads beacons from pillar without restart\n- Fix the aptpkg.py unit test failure\n- Prefer unittest.mock to python-mock in test suite\n- Enable 'KeepAlive' probes for Salt SSH executions (bsc#1211649)\n- Revert changes to set Salt configured user early in the stack (bsc#1216284)\n- Align behavior of some modules when using salt-call via symlink (bsc#1215963)\n- Fix gitfs '__env__' and improve cache cleaning (bsc#1193948)\n- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed\n","status":"published","published":"2024-02-15T13:42:26Z","modified":"2026-02-04T04:04:18.963763Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0513-1","title":"Security update for SUSE Manager Server 4.3","description":"\nThis update fixes the following issues:\n\nrelease-notes-susemanager:\n\n- Update to SUSE Manager 4.3.11\n  * Migrate from RHEL and its clones to SUSE Liberty Linux\n  * Reboot required indication for non-SUSE distributions\n  * SSH key rotation for enhanced security\n  * Configure remote command execution\n  * End of Debian 10 support\n  * CVEs fixed: \n    CVE-2023-32189, CVE-2024-22231, CVE-2024-22232\n  * Bugs mentioned:    \n    bsc#1170848, bsc#1210911, bsc#1211254, bsc#1211560, bsc#1211912\n    bsc#1213079, bsc#1213507, bsc#1213738, bsc#1213981, bsc#1214077\n    bsc#1214791, bsc#1215166, bsc#1215514, bsc#1215769, bsc#1215810\n    bsc#1215813, bsc#1215982, bsc#1216114, bsc#1216394, bsc#1216437\n    bsc#1216550, bsc#1216657, bsc#1216753, bsc#1216781, bsc#1216988\n    bsc#1217069, bsc#1217209, bsc#1217588, bsc#1217784, bsc#1217869\n    bsc#1218019, bsc#1218074, bsc#1218075, bsc#1218089, bsc#1218094\n    bsc#1218490, bsc#1218615, bsc#1218669, bsc#1218849, bsc#1219577\n    bsc#1219850, bsc#1218146\n","status":"published","published":"2024-02-15T13:43:22Z","modified":"2026-02-04T03:55:28.73898Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:1517-1","title":"Security update for SUSE Manager Salt Bundle","description":"This update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n\n  * CVE-2024-22231: Prevent directory traversal when creating syndic cache directory on the master (bsc#1219430)\n  * CVE-2024-22232: Prevent directory traversal attacks in the master's serve_file method (bsc#1219431)\n    \n- Bugs fixed:\n\n  * Convert oscap output to UTF-8\n  * Make Salt compatible with Python 3.11\n  * Ignore non-ascii chars in oscap output (bsc#1219001)\n  * Fix detected issues in Salt tests when running on VMs\n  * Make importing seco.range thread safe (bsc#1211649)\n  * Fix problematic tests and allow smooth tests executions on containers\n  * Discover Ansible playbook files as '*.yml' or '*.yaml' files (bsc#1211888)\n  * Prevent exceptions with fileserver.update when called via state (bsc#1218482)\n  * Improve pip target override condition with VENV_PIP_TARGET environment variable (bsc#1216850)\n  * Fixed KeyError in logs when running a state that fails\n","status":"published","published":"2024-05-06T09:49:02Z","modified":"2026-02-04T04:16:29.566734Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1518-1","title":"Security update for SUSE Manager Salt Bundle","description":"\nThis update fixes the following issues:\n\nvenv-salt-minion:\n\n- Security issues fixed:\n\n  * CVE-2024-22231: Prevent directory traversal when creating syndic cache directory on the master (bsc#1219430)\n  * CVE-2024-22232: Prevent directory traversal attacks in the master's serve_file method (bsc#1219431)\n    \n- Bugs fixed:\n\n  * Convert oscap output to UTF-8\n  * Make Salt compatible with Python 3.11\n  * Ignore non-ascii chars in oscap output (bsc#1219001)\n  * Fix detected issues in Salt tests when running on VMs\n  * Make importing seco.range thread safe (bsc#1211649)\n  * Fix problematic tests and allow smooth tests executions on containers\n  * Discover Ansible playbook files as '*.yml' or '*.yaml' files (bsc#1211888)\n  * Prevent exceptions with fileserver.update when called via state (bsc#1218482)\n  * Improve pip target override condition with VENV_PIP_TARGET environment variable (bsc#1216850)\n  * Fixed KeyError in logs when running a state that fails\n","status":"published","published":"2024-05-06T09:49:26Z","modified":"2026-02-04T04:34:04.462352Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1525-1","title":"Security update for SUSE Manager Salt Bundle","description":"\nThis update fixes the following issues:\n\nvenv-salt-minion:\n\n- CVE-2024-22231: Prevent directory traversal when creating syndic cache directory\n  on the master (bsc#1219430)\n- CVE-2024-22232: Prevent directory traversal attacks in the master's serve_file\n  method (bsc#1219431)\n- Convert oscap output to UTF-8\n- Make Salt compatible with Python 3.11\n- Ignore non-ascii chars in oscap output (bsc#1219001)\n- Fix detected issues in Salt tests when running on VMs\n- Make importing seco.range thread safe (bsc#1211649)\n- Fix problematic tests and allow smooth tests executions on containers\n- Discover Ansible playbook files as '*.yml' or '*.yaml' files (bsc#1211888)\n- Prevent exceptions with fileserver.update when called via state (bsc#1218482)\n- Improve pip target override condition with VENV_PIP_TARGET\n  environment variable (bsc#1216850)\n- Fixed KeyError in logs when running a state that fails\n\n","status":"published","published":"2024-05-06T09:50:25Z","modified":"2026-02-04T04:02:29.850966Z","updated_at":"2026-11-02T15:53:54.652421Z"}]}}