CVE-2021-21996

CVE-2021-21996: vulnerability in Saltstack Salt

Published · Updated

Follow this CVE+ Monitor SaltStack Salt+ Monitor salt

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.4%
An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.
Affected products
n/a · Saltstack Salt