CVE-2018-15750

—

CVSS 3.0

5.3 medium

EPSS

4%p91

Published

Oct 24, 2018 (Oct 24, 2018)

Modified

Jun 17, 2026

Description

Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server.

Vendors: saltstack
Products: salt
Weakness: CWE-22
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (4.3%)

In the news0 stories

No ingested article mentions this CVE yet.