Threats tagged 'ghsa-rg4p-j9f7-f4gg'

A vulnerability in the publishing component of Amazon Virtual Engineering Workbench (VEW) allows remote authenticated users to execute arbitrary code with the permissions of the publishing Lambda's IAM role. This occurs due to improper neutralization of special elements in a template engine, exploitable via crafted CloudFormation template bodies submitted through the product versioning API. Exploitation could lead to unauthorized access to data and resources across all tenant projects.