CVE-2020-26205: Sal Project Sal

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

Sal is a multi-tenanted reporting dashboard for Munki with the ability to display information from Facter. In Sal through version 4.1.6 there is an XSS vulnerability on the machine_list view.

Affected products

• Sal Project Sal: up to and including 4.1.6

Published 2020-10-29. Last modified 2026-06-17.