Skip to content
OpenAdvisories

Product · amazon

amazon-connect-salesforce-lambda

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.1

    Missing Authorization in sfExecuteAWSService Lambda Dispatcher in Amazon Connect Salesforce Lambda

    Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principal with lambda:InvokeFunction permission on the affected function to escalate privileges and perform AWS API operations that their own IAM identity is explicitl…