Back to the CVE list
CVE-2020-11651 CISA KEV · Actively exploited

salt: salt-master process ClearFuncs class does not properly validate method calls

CVSS score

9.8

EPSS probability

%96.6

Risk score

18.9

Published

6 y ago

OverviewPublic Exploits (13)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
jasperla/CVE-2020-11651-poc
GitHub

PoC exploit of CVE-2020-11651 and CVE-2020-11652 (★110)

Public PoCSource updated: 12.04.2022 04:56:43
G
0xc0d/CVE-2020-11651
GitHub

CVE-2020-11651: Proof of Concept (★41)

Public PoCSource updated: 18.11.2021 18:33:41
G
heikanet/CVE-2020-11651-CVE-2020-11652-EXP
GitHub

CVE-2020-11651&&CVE-2020-11652 EXP (★23)

Public PoCSource updated: 26.04.2022 14:33:16
G
kevthehermit/CVE-2020-11651
GitHub

PoC for CVE-2020-11651 (★8)

Public PoCSource updated: 15.12.2021 23:39:12
G
RakhithJK/CVE-2020-11651
GitHub

PoC for CVE-2020-11651 (★0)

Public PoCSource updated: 12.05.2020 04:17:30
G
appcheck-ng/salt-rce-scanner-CVE-2020-11651-CVE-2020-11652
GitHub

Scanning tool to test for SaltStack vulnerabilities CVE-2020-11651 & CVE-2020-11652. (★0)

Public PoCSource updated: 30.11.2020 18:48:22
G
hardsoftsecurity/CVE-2020-11651-PoC
GitHub

Repository that contains a CVE-2020-11651 Exploit updated to work with the latest versions of python. (★0)

Public PoCSource updated: 18.12.2023 23:00:13
G
Drew-Alleman/CVE-2020-11651
GitHub

A script that exploits SaltStack CVE-2020-11651 and CVE-2020-11652 to add new users to a vulnerable Salt master by injecting entries into /etc/passwd and /etc/shadow. (★0)

Public PoCSource updated: 30.03.2025 15:44:49
G
CyberCTF/vulhub-saltstack-cve-2020-11651
GitHub

Vulhub saltstack/CVE-2020-11651: SaltStack Master Authentication Bypass (CVE-2020-11651), run with Isoloom (★0)

Public PoCSource updated: 09.10.2026 08:13:55
E
Saltstack 3000.1 - Remote Code Execution
Exploit-DB

Saltstack 3000.1 - Remote Code Execution

Exploit referenceSource updated: 05.05.2020 00:00:00
G
limon768/CVE-2020-11652-POC
GitHub

This is a fix POC CVE-2020-11651 & CVE-2020-11651

Public PoC
G
s1lentf00thold/CVE-2020-11651-Poc
GitHub

s1lentf00thold/CVE-2020-11651-Poc

Public PoC
G
ssrsec/CVE-2020-11651-CVE-2020-11652-EXP
GitHub

CVE-2020-11651&&CVE-2020-11652 EXP

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2020-11651"