Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-16846
9.8
CRITICALCVSS v3
Published
November 6, 2020
CVSS v2
7.5 HIGH
Affected
14 projects
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.
saltstack/salt
GitHubSoftware to automate the management and configuration of infrastructure and applications at scale.
GitHubSoftware to automate the management and configuration of infrastructure and applications at scale.= 3001, >= 2019.2.0, < 2019.2.5, >= 3000.0, < 3000.3, >= 2018.2.0, < 2018.3.5, >= 2016.3.7, < 2016.3.8, >= 2017.7.5, < 2017.7.8, >= 2017.5.0, < 2017.7.4, >= 2016.11.7, < 2016.11.10, >= 2016.11.4, < 2016.11.6, < 2015.8.10, >= 2015.8.11, < 2015.8.13, >= 2016.3.0, < 2016.3.4, >= 2016.3.5, < 2016.3.6, >= 2016.11.0, < 2016.11.3, = 3002NVD
twangboy/saltGitHubSoftware to automate the management and configuration of any infrastructure or application at scale. Get access to the Salt Open software package repository here:
GitHubSoftware to automate the management and configuration of any infrastructure or application at scale. Get access to the Salt Open software package repository here: = 3001, >= 2019.2.0, < 2019.2.5, >= 3000.0, < 3000.3, >= 2018.2.0, < 2018.3.5, >= 2016.3.7, < 2016.3.8, >= 2017.7.5, < 2017.7.8, >= 2017.5.0, < 2017.7.4, >= 2016.11.7, < 2016.11.10, >= 2016.11.4, < 2016.11.6, < 2015.8.10, >= 2015.8.11, < 2015.8.13, >= 2016.3.0, < 2016.3.4, >= 2016.3.5, < 2016.3.6, >= 2016.11.0, < 2016.11.3, = 3002
Crates.io
RubyGems
NPM
Docker Hub