Summary
The AWS Java SDK was vulnerable to XML external entity (XXE) injection related to XML parsers.
Affected Services
Java SDK
Remediation
None required
Tracked CVEs
No tracked CVEs
References
https://github.com/aws/aws-sdk-java/commit/080a0037395f8b1e8e81b59c9d2c3a3d7624c8ac#diff-4ac32a78649ca5bdd8e0ba38b7006a1eR8https://twitter.com/alexbrasetvik/status/1293088161363525633
Contributed by https://github.com/korniko98
Entry Status
Finalized
Disclosure Date
-
Exploitablity Period
-
Known ITW Exploitation
-
Detection Methods
-
Piercing Index Rating
-
Discovered by
Alex Brasetvik
