Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: AWS Serverless Application Model Command Line Interface — aws.amazon.com/security/security-bulletins/AWS-2025-008 Clear all filters
TI-2025-02661 CVE-2025-3048 · GHSA-pp64-wj43-xqcr

Path Traversal in AWS SAM CLI allows file copy to local cache

Priority LOW 32

After completing a build with AWS Serverless Application Model Command Line Interface (SAM CLI) which include symlinks, the content of those symlinks are copied to the cache of the local workspace as regular files or dir…

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00672 Published 2025-03-31 Fixed in 1.134.0 CWE-61
TI-2025-02660 CVE-2025-3047 · GHSA-px37-jpqx-97q9

Path Traversal in AWS SAM CLI allows file copy to build container

Priority LOW 32

When running the AWS Serverless Application Model Command Line Interface (SAM CLI) build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged file…

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00784 Published 2025-03-31 Fixed in 1.133.0 CWE-61