CVE-2023-51386 Sandbox Accounts for Events vulnerable to privilege escalation to read running events data

🗓️ 22 Dec 2023 21:58:58Reported by GoogleType

osv🔗 osv.dev👁 20 Views

Sandbox Accounts for Events provides temporary AWS accounts to authenticated users via GUI. Users can access events table, potentially revealing planned events, timeframes, budgets, and owner email addresses. Patched in v1.10.0.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2023-51386	22 Dec 202323:23	–	circl
CNNVD	Amazon Sandbox Accounts for Events Security Breach	22 Dec 202300:00	–	cnnvd
CVE	CVE-2023-51386	22 Dec 202321:58	–	cve
Cvelist	CVE-2023-51386 Sandbox Accounts for Events vulnerable to privilege escalation to read running events data	22 Dec 202321:58	–	cvelist
EUVD	EUVD-2023-56107	3 Oct 202520:07	–	euvd
NVD	CVE-2023-51386	22 Dec 202322:15	–	nvd
Prion	Design/Logic Flaw	22 Dec 202322:15	–	prion
Positive Technologies	PT-2023-31801 · Unknown · Sandbox Accounts For Events	22 Dec 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-51386	23 May 202502:17	–	redhatcve

Source	Link
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/51xxx/CVE-2023-51386.json
github	www.github.com/awslabs/sandbox-accounts-for-events/security/advisories/GHSA-p7w3-j66h-m7mx
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-51386
github	www.github.com/awslabs/sandbox-accounts-for-events/commit/f30a0662f0a28734eb33c5868cccc1c319eb6e79

02 Apr 2026 09:45Current

4.4Medium risk

Vulners AI Score4.4

CVSS 3.17.8

EPSS0.00035