1 result · Clear filters · Feed
-
High 8.0
OS command injection in the Amazon CodeCatalyst blueprints SDK
Improper neutralization of special elements used in an OS command (CWE-78) in the blueprint resynthesis framework in Amazon Web Services codecatalyst-blueprints before 0.3.156 might allow a user with permission to commit to a repository in the project to exec…