Threats tagged 'ghsa-rw6v-c2pc-5g8v'

A weakness in Tidelift moto up to version 5.2.4 affects the AWS Batch Emulation component, specifically in the file moto/batch/models.py. The vulnerability involves improper privilege management due to manipulation of the privileged/volumes argument. Remote exploitation is possible, and public exploit code is available. The vendor has not responded to the disclosure.