CVE-2021-22101: Cloudfoundry Capi-Release

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Cloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of Service(DoS) vulnerability allowing unauthenticated attackers to cause denial of service by using REST HTTP requests with label_selectors on multiple V3 endpoints by generating an enormous SQL query.

Affected products

• Cloudfoundry Capi-Release: before 1.118.0 (fixed in 1.118.0)
• Cloudfoundry Cf-Deployment: before 16.24.0 (fixed in 16.24.0)

Published 2021-10-27. Last modified 2026-06-17.