Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2020-11652 PoC — SaltStack Salt 路径遍历漏洞

Source
Associated Vulnerability
Title:SaltStack Salt 路径遍历漏洞 (CVE-2020-11652)
Description:An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.
Description
saltstack CVE-2020-11652 
Readme
# CVE-2020-11652
saltstack CVE-2020-11652 

参考 https://github.com/jasperla/CVE-2020-11651-poc
File Snapshot

[4.0K] /data/pocs/01cd42157f10743f59581402226736e606d7e43c ├── [3.8M] cve-2020-16152.exe ├── [ 183] go.mod ├── [4.2K] go.sum ├── [ 11K] LICENSE ├── [2.6K] main.go └── [ 98] README.md 0 directories, 6 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →