{"id":"CVE-2024-22231","details":"Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.","aliases":["GHSA-q27c-j6j9-53w3","PYSEC-2026-1900"],"modified":"2026-07-24T18:43:23.137945544Z","published":"2024-06-27T07:15:52Z","withdrawn":"2024-06-30T13:40:16.342578Z","related":["SUSE-EL-9-CLIENT-TOOLS-2024-1525","SUSE-SU-2024:0506-1","SUSE-SU-2024:0507-1","SUSE-SU-2024:0508-1","SUSE-SU-2024:0509-1","SUSE-SU-2024:0510-1","SUSE-SU-2024:0513-1","SUSE-SU-2024:1517-1","SUSE-SU-2024:1518-1","SUSE-SU-2024:1525-1","openSUSE-SU-2024:13650-1"],"references":[{"type":"ADVISORY","url":"https://saltproject.io/security-announcements/2024-01-31-advisory/"}],"affected":[{"package":{"name":"salt","ecosystem":"Debian:10","purl":"pkg:deb/debian/salt?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2018.3.4+dfsg1-6","2018.3.4+dfsg1-6+deb10u1","2018.3.4+dfsg1-6+deb10u2","2018.3.4+dfsg1-6+deb10u3","2018.3.4+dfsg1-7","2019.2.3+dfsg1-1","2019.2.3+dfsg1-2","3000+dfsg1-1","3000+dfsg1-2","3000+dfsg1-3","3000+dfsg1-4","3000.1+dfsg1-1","3000.2+dfsg1-1","3001+dfsg1-1","3001+dfsg1-2","3001.1+dfsg1-1","3001.1+dfsg1-2","3002+dfsg1-1","3002.1+dfsg1-1","3002.2+dfsg1-1","3002.5+dfsg1-1","3002.6+dfsg1-1","3002.6+dfsg1-2","3002.6+dfsg1-3","3002.6+dfsg1-4","3002.7+dfsg1-1","3004+dfsg1-1","3004+dfsg1-10","3004+dfsg1-2","3004+dfsg1-3","3004+dfsg1-4","3004+dfsg1-5","3004+dfsg1-6","3004+dfsg1-7","3004+dfsg1-8","3004+dfsg1-9","3004.1+dfsg-1","3004.1+dfsg-2","3004.1+dfsg-2.1","3004.1+dfsg-2.2"],"ecosystem_specific":{"urgency":"end-of-life"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-22231.json"}}],"schema_version":"1.7.3"}