CVE-2021-22557 is a high-severity vulnerability affecting Google's SLO Generator, allowing for remote code execution through specially crafted YAML files. With a CVSS score of 7.8, a successful exploit could lead to complete compromise of confidentiality, integrity, and availability within the SLO Generator's context. While not currently on CISA's KEV catalog or showing active exploitation, public exploit code exists, indicating a potential for future attacks. Community discussion and media coverage are minimal, but the FAUCET Risk Score of 89/100 highlights its significant risk.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.0.0CPE match | cpe:2.3:a:google:slo_generator:*:*:*:*:*:*:*:* | ||
< 2.0.1CPE matchmatch criteria | cpe:2.3:a:google:slo_generator:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.