Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2025-22239

CVE-2025-22239 salt advisory

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

Arbitrary event injection on Salt Master. The master's "_minion_event" method can be used by and authorized minion to send arbitrary events onto the master's event bus.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VMware SALT

Default version status: unaffected

  • 3006.x to < 3006.12affected
  • 3007.x to < 3007.4affected

References