Live › vulnerability › CVE-2020-11652
Go to dashboardSaltStack Salt's salt-master ClearFuncs component has a path traversal flaw that lets a logged-in user reach directories they should not access. CISA lists it as actively exploited in the wild, and the sources do not say what files an attacker can read or write.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| SaltStack Salt | vendor | – | – |
Check the installed salt version on the master with salt --version or salt-master --version and compare it to the fixed release in the advisory.
Upgrade the salt-master package to a release that includes the vendor fix for CVE-2020-11652, per the SaltStack advisory.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated users. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2020-11652")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.