CVE-2025-22238

CVE-2025-22238 salt advisory

Medium · published June 13, 2025

CVSS v3.1
4.2
EPSS
0%
Percentile
20.6
In the wild
Unconfirmed
What it is

Directory traversal attack in minion file cache creation. The master's default cache is vulnerable to a directory traversal attack. Which could be leveraged to write or overwrite 'cache' files outside of the cache directory.

The record
Technical detail
CVSS v3.1
4.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00291 · 20.6th percentile
Published
2025-06-13T06:58Z
EPSS history
Timeline
  • 13 JUN 06:58Z
    CVE-2025-22238 salt advisory
    cvelistv5