CVE-2024-38824
critical · 9.6Directory traversal vulnerability in recv_file method allows arbitrary files to be written to the master cache directory.
9.6
CVSS
1.0%
EPSS (exploit prob.)
62nd
EPSS percentile
2025-06-13
Published
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Weaknesses
CWE-22
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| saltstack | salt | >= 3006.0, < 3006.12 |
| saltstack | salt | >= 3007.0, < 3007.4 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2024-38824