AWS Ops Wheel vulnerabilities
3 known vulnerabilities in AWS Ops Wheel from AWS. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
AWS Ops Wheel: Improper Neutralization of Input During Web Page Generation
Stored cross-site scripting in the participant URL handling in AWS Ops Wheel before PR #168 might allow an authenticated remote user to steal session tokens and escalate to full administrative control of the deployed instance via a crafted participant_url valu
- 8.8 High severity
AWS Ops Wheel: Improperly Controlled Modification of Dynamically-Determined Object Attributes
Improperly controlled modification of dynamically-determined object attributes in the Cognito User Pool configuration in AWS Ops Wheel before PR #165 allows remote authenticated users to escalate to deployment admin privileges and manage Cognito user accounts
- 9.8 Critical severity
AWS Ops Wheel: Improper Verification of Cryptographic Signature
Missing JWT signature verification in AWS Ops Wheel allows unauthenticated attackers to forge JWT tokens and gain unintended administrative access to the application, including the ability to read, modify, and delete all application data across tenants and man