repository icon
aws / aws-cli Project repository

Universal Command Line Interface for Amazon Web Services

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN35 DAYS

FIX

WITHINN/A DAYS

Invocation of Process Using Visible Sensitive Information in aws-cli ssm start-s...
leduckhuong
self closed
CodeArtifact TwineLogin writes auth token to .pypirc with world-readable permiss...
souta40524052
pending
aws-cli s3 sync arbitrary file write outside destination on POSIX via malicious...
noobosaurus-r3x
pending
## Title IAM Trust Policy Injection via Unsanitized Namespace Parameter in EMR C...
artqcid
pending
## Title TOCTOU Race Condition in EKS Kubeconfig File Operations
artqcid
pending
## Title Insecure File Permissions on Credential Files (CodeDeploy + CodeArtifac...
artqcid
pending
## Title Symlink Race Condition in Archive Operations (CloudFormation, GameLift,...
artqcid
pending
## Title Command Injection in `aws codecommit credential-helper` via Malicious R...
artqcid
duplicate
Medium
## Title Terminal Escape Sequence Injection via CloudWatch Logs in `aws logs sta...
artqcid
pending
## Title Path Traversal via Unsanitized File Paths in add-model and 6 Additional...
artqcid
pending
## Title OS Command Injection via Unsanitized External Input in ECR Login and PA...
artqcid
pending
## Title Path Traversal in `aws configure add-model` via S3 API Model Files
artqcid
self closed
## Title Path Traversal in `aws s3 cp --recursive` via absolute S3 key bypasses...
artqcid
pending
## Title Command Injection in `aws ecr get-login` via Server-Controlled Authoriz...
artqcid
self closed
Path Traversal via Absolute Key — Security Check Bypass
artqcid
self closed
Shell Injection via ExternalAliasCommand using shell=True in awscli/alias.py
professor-13
pending
AWS CLI os.path.expandvars() in file:// parameter handling silently expands env...
sinhsinhan
pending
AWS CLI ExternalAliasCommand shell injection via unsanitized alias value passed...
sinhsinhan
duplicate
High
Incomplete token redaction in aws codeartifact login leaks CodeArtifact authoriz...
unicuervo16
pending
AWS CLI paramfile get_uri() Server-Side Request Forgery (SSRF) - No URL Validati...
mia-718ai
pending
AWS CLI CodeCommit Credential Helper Sensitive Information Disclosure in DEBUG L...
mia-718ai
pending
AWS CLI CodeCommit Credential Helper Domain Validation Bypass Leading to AWS Cre...
mia-718ai
pending
Sensitive data exposure in cli_history plus weak default permissions for history...
f00dat
pending
Symbolic Command Table Injection via Plugin/Alias Rerouting in CLIDriver.main()
darkeeeandme
not applicable
Symbolic Parameter Injection via Unchecked CLI Unpacking in add_to_params()
darkeeeandme
not applicable
Arbitrary Code Execution via Unvalidated Plugin Path Injection in load_plugins()
darkeeeandme
not applicable
Unvalidated Parameter File Expansion via get_paramfile() Enables File Poisoning
darkeeeandme
not applicable
A hidden backdoor on aws-cli
groovybugify
not applicable
Use of weak MD5 hash
giantathos
informative
None
Improper Neutralization of Special Elements used in an OS Command
hob1t
self closed
Insecure Handling of Credentials in Function Call Parameters
sachin141
not applicable