CVE-2023-34049
2 advisories.
PyPI/salt CVE-2023-34049: medium 6.7, EPSS 0.19%
Salt preflight script could be attacker controlled
Action: Upgrade salt to 3005.4 or later.
pip install salt==3005.4pip install salt==3006.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3005.4 | - |
| 3006.0rc1 | 3006.4 | - |
Fixed versions
| 3005.4 | 3006.4 |
Sources
- osv: GHSA-4277-m35q-7c9w
- https://nvd.nist.gov/vuln/detail/CVE-2023-34049
- https://github.com/saltstack/salt/commit/286d55eb5a6e6bf9428405bdf5632b419bdf8444
- https://github.com/saltstack/salt/commit/7a14112f2a16ce70e3c3e1862c92e37af5f2c7a4
- https://github.com/saltstack/salt
- https://saltproject.io/security-announcements/2023-10-27-advisory
CVE-2023-34049 · published · modified · JSON
PyPI/salt CVE-2023-34049: medium 6.7, EPSS 0.19%
Salt preflight script could be attacker controlled
Action: Upgrade salt to 3005.4 or later.
pip install salt==3005.4pip install salt==3006.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3005.4 | - |
| 3006.0rc1 | 3006.4 | - |
Fixed versions
| 3005.4 | 3006.4 |
Sources
- osv: PYSEC-2026-1892
- https://nvd.nist.gov/vuln/detail/CVE-2023-34049
- https://github.com/saltstack/salt/commit/286d55eb5a6e6bf9428405bdf5632b419bdf8444
- https://github.com/saltstack/salt/commit/7a14112f2a16ce70e3c3e1862c92e37af5f2c7a4
- https://github.com/saltstack/salt
- https://saltproject.io/security-announcements/2023-10-27-advisory
- https://pypi.org/project/salt
- https://github.com/advisories/GHSA-4277-m35q-7c9w
CVE-2023-34049 · published · modified · JSON