Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-22231
• https://saltproject.io/security-announcements/2024-01-31-advisory
• saltstack/salt@e0cdb80