2021-02-27 00:00:00
mitre
PUBLISHED
An issue was discovered in SaltStack Salt before 3002.5. The salt-apis ssh client is vulnerable to a shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API request.