GitHub Advisoryadvisory · PyPI

GHSA-qr38-h96j-2j3w SaltStack Salt Command Injection in netapi ssh client

CRITICAL Published 2022-05-24 Modified 2025-10-22 Official page ↗
Aliases
CVE-2020-16846
Ecosystem
PyPI
Packages
salt
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
Weaknesses
CWE-78
Reviewed
2024-04-22

Affected packages

• PyPI salt: < 2015.8.13 → fixed in 2015.8.13 • PyPI salt: >= 2016.3.0, < 2016.3.8 → fixed in 2016.3.8 • PyPI salt: >= 2016.11.0, < 2016.11.10 → fixed in 2016.11.10 • PyPI salt: >= 2017.5.0, < 2017.7.8 → fixed in 2017.7.8 • PyPI salt: >= 2018.2.0, < 2018.3.5 → fixed in 2018.3.5 • PyPI salt: >= 2019.2.0, < 2019.2.6 → fixed in 2019.2.6 • PyPI salt: >= 3000.0, < 3000.4 → fixed in 3000.4 • PyPI salt: >= 3001, < 3001.2 → fixed in 3001.2 • PyPI salt: >= 3002, < 3002.1 → fixed in 3002.1

Description

An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.

Related

Alias · CVE (1)

  • CVE-2020-16846 An issue was discovered in SaltStack Salt through 3002. vulnerability

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References