Skip to content

Saltstack · weakness class

File and Path Handling

6 CVEs · 1 exploited

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

exploited in the wild
1
likely to be exploited
1

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

  1. An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize p…CVE-2020-11652SaltStack · CVSS 6.5 · 86% likely

    CWE-22

  2. An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method is vulnerable to directory traversal.CVE-2021-25282Saltstack · 93% likely

    CWE-22

  3. Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote minions with incorrect credentials to authe…CVE-2017-12791Saltstack · 4.7% likely

    CWE-22

  4. Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server.CVE-2018-15750Saltstack · 4.4% likely

    CWE-22

  5. Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with in…CVE-2017-14695Saltstack · 3.3% likely

    CWE-22

  6. Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1)…CVE-2014-3563Saltstack · 0.4% likely

    CWE-59

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in