Launchpad.net

CVE 2021-25282

An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method is vulnerable to directory traversal.

See the CVE page on Mitre.org for more details.