CVE-2021-22571

CVE-2021-22571 describes a local file disclosure vulnerability affecting Google's SA360 Webquery to BigQuery Exporter. A local attacker could read other users' SA360 report files temporarily stored in the /tmp directory during the staging process before being loaded into BigQuery. Rated as Medium severity (CVSS 5.5), this vulnerability has a low attack complexity and requires local access (AV:L, AC:L, PR:L). The primary impact is high confidentiality compromise (C:H), allowing unauthorized access to sensitive report data. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. Users are advised to upgrade to version 1.0.3 or above to mitigate this risk.