Lucene search
GoogleOSV:PYSEC-2021-55HistoryFeb 27, 2021 - 5:15 a.m.
PYSEC-2021-55
2021-02-2705:15:00
Google
osv.dev
9
saltstack
command injection
web requests
EPSS
0.059
Percentile
93.5%
An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.gen_thin() command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py.
References
github.com/saltstack/salt/releases
lists.fedoraproject.org/archives/list/[email protected]/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/
lists.fedoraproject.org/archives/list/[email protected]/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/
lists.fedoraproject.org/archives/list/[email protected]/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/
saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/
security.gentoo.org/glsa/202103-01
Related
prion
prion
Command injection
2021-02-27 05:15:00
ubuntucve
ubuntucve
CVE-2021-3148
2021-02-27 00:00:00
cve
cve
CVE-2021-3148
2021-02-27 05:15:14
debiancve
debiancve
CVE-2021-3148
2021-02-27 05:15:14
veracode
veracode
Command Injection
2021-03-01 06:13:29
redhatcve
redhatcve
CVE-2021-3148
2021-02-26 19:02:58
cvelist
cvelist
CVE-2021-3148
2021-02-27 00:00:00
osv
osv
CVE-2021-3148
2021-02-27 05:15:14
salt - security update
2021-11-10 00:00:00
alpinelinux
alpinelinux
CVE-2021-3148
2021-02-27 05:15:14
github
github
nvd
nvd
CVE-2021-3148
2021-02-27 05:15:14
nessus
nessus
Photon OS 3.0: Salt3 PHSA-2021-3.0-0200
2021-02-27 00:00:00
SUSE SLES15 Security Update : salt (SUSE-SU-2021:0628-1)
2021-03-01 00:00:00
SaltStack < 3002.5 Multiple Vulnerabilities
2021-03-25 00:00:00
freebsd
freebsd
salt -- multiple vulnerabilities
2021-02-25 00:00:00
gentoo
gentoo
Salt: Multiple vulnerabilities
2021-03-31 00:00:00
Salt: Multiple Vulnerabilities
2023-10-31 00:00:00
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-1.0-0364
2021-02-26 00:00:00
Important Photon OS Security Update - PHSA-2021-0364
2021-02-27 00:00:00
Critical Photon OS Security Update - PHSA-2021-0047
2021-06-16 00:00:00
suse
suse
Security update for salt (critical)
2021-02-26 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: salt-3001.6-1.fc32
2021-03-02 15:35:09
[SECURITY] Fedora 34 Update: salt-3002.5-1.fc34
2021-03-19 20:22:58
[SECURITY] Fedora 33 Update: salt-3002.5-1.fc33
2021-03-02 15:56:30
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2021:0628-1)
2021-04-19 00:00:00
Fedora: Security Advisory for salt (FEDORA-2021-43eb5584ad)
2021-03-20 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:0631-1)
2021-04-19 00:00:00
archlinux
archlinux
[ASA-202102-33] salt: multiple issues
2021-02-27 00:00:00
debian
debian
[SECURITY] [DLA 2815-1] salt security update
2021-11-10 18:08:20
[SECURITY] [DSA 5011-1] salt security update
2021-11-19 11:19:25
ubuntu
ubuntu
Salt vulnerabilities
2024-08-08 00:00:00