{"action":"Upgrade salt to 3003.3 or later.","affected":[{"fixed":"3003.3","introduced":"0"}],"component":"salt","cve_ids":["CVE-2021-22004"],"ecosystem":"PyPI","epss":0.00354,"exploited":false,"fixed_versions":["3003.3"],"ghsa_id":"GHSA-xf37-qcvf-7m57","id":"tcs_01M5KGCGF6M7ZG2GD7WN6H53AV","modified_at":"2023-11-08T04:04:53.282619Z","published_at":"2021-09-08T15:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-346","https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/","https://github.com/advisories/GHSA-xf37-qcvf-7m57"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-346","url":"https://osv.dev/vulnerability/PYSEC-2021-346"}],"summary":"An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\\salt\\conf if that file is in place before the installer is run. This a"}