CVE-2025-22239 — CVE-2025-22239 salt advisory
Arbitrary event injection on Salt Master. The master's "_minion_event" method can be used by and authorized minion to send arbitrary events onto the master's event bus.
Published: 2025-06-13 · CVSS: 8.1 · CVSS 3.1
Arbitrary event injection on Salt Master. The master's "_minion_event" method can be used by and authorized minion to send arbitrary events onto the master's event bus.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7