Security Advisory
CVE-2025-22239
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Arbitrary event injection on Salt Master. The masters "_minion_event" method can be used by and authorized minion to send arbitrary events onto the masters event bus.