VULNERABILITY INTELLIGENCE

CVE-2020-11652

CVSS score6.5 MEDIUM

EPSS probability86.18%

CISA KEVKnown exploited vulnerability

Published2020-04-30

Last modified2026-06-17

Known Exploited Vulnerability

SaltStack Salt Path Traversal Vulnerability

Vendor / product: SaltStack / Salt

Description

An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.