Skip to content
CVE PROGRAM SOURCE RECORD4.2 Medium

CVE-2025-22238

CVE-2025-22238 salt advisory

Description

Directory traversal attack in minion file cache creation. The master's default cache is vulnerable to a directory traversal attack. Which could be leveraged to write or overwrite 'cache' files outside of the cache directory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VMware SALT

Default version status: unaffected

  • 3006.x to < 3006.12affected
  • 3007.x to < 3007.4affected

References