CVE-2020-11652CISA KEVEPSS p99.7%

CVE-2020-11652SaltStack Salt Path Traversal Vulnerability

SaltStack / Salt

Description

SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated users. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.

Scoring

EPSS86.06% probability of exploitation · percentile 99.7% · 2026-06-18T12:00:27Z

CISA KEV entry

Added to KEV: 2021-11-03

(incoming)1

TypeTargetConfidenceTier
KEVEntrySaltStack Salt Path Traversal Vulnerabilitykev-cve-2020-116520%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
SaltStack Salt Authentication Bypass Vulnerability
CVE
SaltStack Salt Shell Injection Vulnerability
CVE
Grafana Path Traversal Vulnerability
CVE
SolarWinds Serv-U Path Traversal Vulnerability
CVE
CVE-2025-30387
CVE
CVE-2025-22239
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.