Amazon aws-dataall vulnerabilities

Latest Amazon aws-dataall CVEs

Newest publication first

1. CVE-2023-36467 AWS data.all vulnerable to RCE through user injection of Python Commands

   Published 2023-06-28

   High·CVSS 8.8 EPSS 1.2%

   AWS data.all is an open source development framework to help users build a data marketplace on Amazon Web Services. data.all versions 1.2.0 through 1.5.1 do not prevent remote code execution when a user injects Python commands into the ‘Template’ field when configuring a data pip...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.