1 matches found
Arbitrary Command Injection
Overview @cdklabs/cdk-proserve-lib is an AWS CDK library containing constructs, aspects, and patterns. Affected versions of this package are vulnerable to Arbitrary Command Injection due to forgetting to export the new Aspect. An attacker can compromise insecure resource policy settings,...
9.8CVSS7.3AI score
SaveExploits0References3
20