Vmware Salt Project vulnerabilities

CVE-2024-22232 [HIGH] CWE-22 CVE-2024-22232: A specially crafted url can be created which leads to a directory traversal in the salt file server. A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user can read an arbitrary file from a Salt master’s filesystem.

CVE-2024-22231 [MEDIUM] CWE-22 CVE-2024-22231: Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which Syndic cache directory creation is vulnerable to a directory traversal attack in salt project which can lead a malicious attacker to create an arbitrary directory on a Salt master.