description: An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion.
problem types: File traversal attack
affected:
{
vendor: n/a
product: Saltstack Salt
versions:
version: Saltstack Salt (before 3003.3), status: affected
}