high7.5
CVE-2013-4438
Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors.
Impact
Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Saltstack | Salt | through 0.17.0 Versions 0.6.0, 0.7.0, 0.8.0, 0.8.7, 0.8.8 |