AWS virtual-engineering-workbench güvenlik açıkları (CVE)

Template injection in the publishing component of awslabs Virtual Engineering Workbench

Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual Engineering Workbench (VEW) could allow a remote authenticated third party to run arbitrary code with the permissions of the publishing Lambda'…