{"action":"Upgrade salt to 2018.3.4 or later.","affected":[{"fixed":"2018.3.4","introduced":"2018.3.0"}],"component":"salt","cve_ids":["CVE-2019-1010259"],"ecosystem":"PyPI","epss":0.01898,"exploited":false,"fixed_versions":["2018.3.4"],"ghsa_id":"GHSA-h8xp-h3jf-wv4v","id":"tcs_01M5KFK944H9KJHGMMFDZ44DN4","modified_at":"2024-10-25T20:25:14.913483Z","published_at":"2022-05-24T16:50:39Z","references":["https://osv.dev/vulnerability/GHSA-h8xp-h3jf-wv4v","https://nvd.nist.gov/vuln/detail/CVE-2019-1010259","https://github.com/saltstack/salt/pull/51462","https://github.com/ShantonRU/salt/commit/a46c86a987c78e74e87969d8d3b27094e6544b7a","https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2019-119.yaml","https://github.com/saltstack/salt","https://github.com/saltstack/salt/blob/f22de0887cd7167887f113bf394244b74fb36b6b/salt/modules/mysql.py#L1534"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-h8xp-h3jf-wv4v","url":"https://osv.dev/vulnerability/GHSA-h8xp-h3jf-wv4v"}],"summary":"SaltStack Salt SQL Injection vulnerability in mysql.user_chpass function"}