CVE-2013-4438

Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors

published November 5, 2013

CVSS
—
EPSS
2%
Percentile
81.7
In the wild
Unconfirmed
What it is

Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02116 · 81.7th percentile
Published
2013-11-05T18:00Z
EPSS history
Timeline
  • 05 NOV 18:00Z
    Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors
    cvelistv5