CNNVD-202506-1766 Information

CNNVD ID

CNNVD-202506-1766

CVE-2025-22242

  • CNNVD Published: 2025-06-13

Description (Chinese)

Salt是Salt项目的一个自动化、基础设施管理、数据驱动编排和远程执行应用程序。 Salt存在安全漏洞,该漏洞源于主pub_ret方法中未清理输入值jid,可能导致拒绝服务。

Description (English)

Salt is an automation, infrastructure management, data-driven organization and remote implementation application for the Salt project. There was a security loophole in Salt, which originated from the uncleaned input jid in the main pub ret method and could lead to the denial of services.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Salt

Published

2025-06-13

Last Modified

2026-02-24

References

https://docs.saltproject.io/en/3006/topics/releases/3006.12.html https://docs.saltproject.io/en/3007/topics/releases/3007.4.html

Patch

https://packages.broadcom.com/artifactory/saltproject-generic/

Share on: