{"action":"Upgrade salt to 2016.11.10 or later.","affected":[{"fixed":"2017.7.8","introduced":"2017.7.0"},{"fixed":"2018.3.3","introduced":"2018.3.0"},{"fixed":"2016.11.10","introduced":"2016.11.0"}],"component":"salt","cve_ids":["CVE-2018-15750"],"ecosystem":"PyPI","epss":0.04275,"exploited":false,"fixed_versions":["2017.7.8","2018.3.3","2016.11.10"],"ghsa_id":"GHSA-jx34-pppm-gjvr","id":"tcs_01M5KFPSFSG39K8V49MW1NDXS4","modified_at":"2024-10-23T18:52:32.882144Z","published_at":"2022-05-13T01:23:13Z","references":["https://osv.dev/vulnerability/GHSA-jx34-pppm-gjvr","https://nvd.nist.gov/vuln/detail/CVE-2018-15750","https://docs.saltstack.com/en/2017.7/topics/releases/2017.7.8.html","https://docs.saltstack.com/en/latest/topics/releases/2018.3.3.html","https://github.com/pypa/advisory-database/tree/main/vulns/salt/PYSEC-2018-29.yaml","https://github.com/saltstack/salt","https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2016.11.10.rst#L15","https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2017.7.8.rst#L28","https://github.com/saltstack/salt/blob/8f9405cf8e6f7d7776d5000841c886dec6d96250/doc/topics/releases/2018.3.3.rst#L58","https://groups.google.com/d/msg/salt-users/L9xqcJ0UXxs/qgDj42obBQAJ","https://groups.google.com/d/msg/salt-users/dimVF7rpphY/jn3Xv3MbBQAJ","https://lists.debian.org/debian-lts-announce/2020/07/msg00024.html","https://usn.ubuntu.com/4459-1","http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00070.html"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-jx34-pppm-gjvr","url":"https://osv.dev/vulnerability/GHSA-jx34-pppm-gjvr"}],"summary":"SaltStack Salt Directory Traversal vulnerability in salt-api"}