CVE-2021-32783

CVE-2021-32783 is a high-severity vulnerability affecting Contour, a Kubernetes ingress controller, specifically versions prior to 1.17.1. It allows an attacker to use a specially crafted ExternalName type Service to access Envoy's administrative interface, which is normally restricted. This access can lead to a denial of service by shutting down Envoy or exposing the existence of secrets (like TLS keypairs), though not their content. The vulnerability has a CVSS score of 8.5 (High), indicating a network-based attack with low complexity, requiring low privileges, and resulting in high availability impact and low confidentiality impact. While it allows for administrative actions like shutting down or draining Envoy, it generally cannot be used to alter cluster configurations or in-flight requests. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant public attention.