Awslabs vulnerabilities
We track 3 vulnerabilities in Awslabs products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 11, 2024.
Latest Awslabs vulnerabilities
- 7.8 High severity
aws-deployment-framework: Incorrect Privilege Assignment
The AWS Deployment Framework (ADF) is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allows for staged, parallel, multi-account, cross-region deployments of applications or resources via the
- 9.0 Critical severity
sandbox-accounts-for-events: Improper Access Control
"Sandbox Accounts for Events" provides multiple, temporary AWS accounts to a number of authenticated users simultaneously via a browser-based GUI. Authenticated users could potentially claim and access empty AWS accounts by sending request payloads to the acco
- 8.8 High severity
aws-dataall: Improper Control of Generation of Code
AWS data.all is an open source development framework to help users build a data marketplace on Amazon Web Services. data.all versions 1.2.0 through 1.5.1 do not prevent remote code execution when a user injects Python commands into the ‘Template’ field when co