CVE-2021-3148 – An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to t …

Vuln ID: CVE-2021-3148

Published:  2021-02-27  05:15:14Z

Description: An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.gen_thin() command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py.

Source: NVD.NIST.GOV

 

Date:

Categorie(s):

Tag(s):