The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. Rated low severity (CVSS 1.8), this vulnerability is remotely exploitable. No vendor patch available.
Authentication Bypass
Jwt Attack
Aws Cloud Development Kit
NVD
GitHub
CVSS 4.0
1.8
EPSS
0.1%
Multiple bash files were present in the application's private directory. Rated low severity (CVSS 2.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Command Injection
NVD
CVSS 4.0
2.0
EPSS
0.1%
Hard-coded credentials were included as part of the application binary. Rated low severity (CVSS 2.0), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
NVD
CVSS 4.0
2.0
EPSS
0.1%