PT-2021-15141 · Google · Slo Generator

Cimihan123 + 1 · Published 2021-10-04 · Updated 2022-10-25 · CVE-2021-22557

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SLO Generator versions prior to the version including https://github.com/google/slo-generator/pull/173

Description The SLO generator has an issue where it allows for the loading of YAML files. If these files are crafted in a specific format, they can enable code execution within the context of the SLO Generator.

Recommendations Upgrade SLO Generator past the version including https://github.com/google/slo-generator/pull/173. As a temporary workaround, consider restricting the loading of YAML files or ensuring they are thoroughly validated before use to minimize the risk of exploitation.

Exploit

Fix

Code Injection

OS Command Injection

Weakness Enumeration

CWE-94

CWE-78

Related Identifiers

CVE-2021-22557

GHSA-J28R-J54M-GPC4

PYSEC-2021-429

Affected Products

Slo Generator

References · 13

• 🔥 https://github.com/google/slo-generator/pull/173 · Exploit
• 🔥 http://packetstormsecurity.com/files/164426/Google-SLO-Generator-2.0.0-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/50385 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-22557 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22557 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-j28r-j54m-gpc4 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2021-429 · Vendor Advisory
• https://github.com/google/slo-generator/commit/36318beab1b85d14bb860e45bea186b184690d5d · Note
• https://github.com/google/slo-generator/releases/tag/v2.0.1 · Note
• https://github.com/google/slo-generator · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/slo-generator/PYSEC-2021-429.yaml · Note
• https://github.com/advisories/GHSA-j28r-j54m-gpc4 · Note
• https://t.me/cibsecurity/29853 · Telegram Post