What is GHSA-j28r-j54m-gpc4?

GHSA-j28r-j54m-gpc4 is a security advisory published by GitHub Security Advisories with Medium severity. Code Injection in SLO Generator

Which CVE IDs does GHSA-j28r-j54m-gpc4 cover?

GHSA-j28r-j54m-gpc4 covers the following CVE IDs: CVE-2021-22557. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j28r-j54m-gpc4?

GHSA-j28r-j54m-gpc4 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

Which products are affected by GHSA-j28r-j54m-gpc4?

GHSA-j28r-j54m-gpc4 affects 1 product, including: pip/slo-generator:\u003c 2.0.1.

GHSA-j28r-j54m-gpc4MediumCVSS 5.3

Code Injection in SLO Generator

Vendor

GitHub Security Advisories

Published

October 5, 2021

Last Modified

October 22, 2024

🔗 CVE IDs covered (1)

CVE-2021-22557 →

📋 Description

SLO generator allows for loading of YAML files that if crafted in a specific format can allow for code execution within the context of the SLO Generator. We recommend upgrading SLO Generator past https://github.com/google/slo-generator/pull/173

🎯 Affected products1

pip/slo-generator:< 2.0.1

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2021-22557
https://github.com/google/slo-generator/pull/173
https://github.com/google/slo-generator/releases/tag/v2.0.1
http://packetstormsecurity.com/files/164426/Google-SLO-Generator-2.0.0-Code-Execution.html
https://github.com/google/slo-generator/commit/36318beab1b85d14bb860e45bea186b184690d5d
https://github.com/pypa/advisory-database/tree/main/vulns/slo-generator/PYSEC-2021-429.yaml
https://github.com/advisories/GHSA-j28r-j54m-gpc4