CVE-2025-22237 — CVE-2025-22237 salt advisory
An attacker with access to a minion key can exploit the 'on demand' pillar functionality with a specially crafted git url which could cause and arbitrary command to be run on th…
Published: 2025-06-13 · CVSS: 6.7 · CVSS 3.1
An attacker with access to a minion key can exploit the 'on demand' pillar functionality with a specially crafted git url which could cause and arbitrary command to be run on the master with the same privileges as the master process.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7