-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| salt | pip | < 3005.5 | 3005.5 |
| salt | pip | >= 3006.0, < 3006.6 | 3006.6 |
Miggo AIRoot Cause AnalysisThe core vulnerability stems from two key areas: 1) In master.py's _syndic_return, directory creation used unsanitized user input (load['id']) to build paths, fixed by adding salt.utils.verify.clean_path check. 2) In fileserver's find_file, the validation order allowed bypassing path checks through URL encoding, as the '../' and absolute path checks were moved after URL unescaping in the patch. The high confidence for _syndic_return comes from direct directory creation logic with user input, while medium confidence for find_file comes from validation order vulnerability that could enable traversal prerequisites.
PythonPythonOngoing coverage of React2Shell