CVE-2020-11652: SaltStack Salt is vulnerable Arbitrary Directory Access

The vulnerability (CVE-2020-11652) explicitly references improper path sanitization in SaltStack Salt's ClearFuncs class. The ClearFuncs class handles master-minion communication, and methods like _file_trans (file transfer logic) and wheel (executing privileged operations) are critical points where path validation would occur. Advisories and release notes indicate these methods lacked proper sanitization, allowing path traversal. The high confidence stems from the direct association of ClearFuncs with the vulnerability description and the nature of the CWE-22 (path traversal) flaw.