PT-2026-86984 · Elenavanengelenmaslova · Mocknest-Serverless
CVSS v3.1
4.7
Média
| Vetor | AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L |
A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/aws/shared/github-oidc-role.yaml of the component AWS GitHub OIDC Deployment Helper Script. Performing a manipulation results in improper privilege management. It is possible to initiate the attack remotely. The patch is named 6ab3147282d867c1993f995272750db091c2290b. Applying a patch is the recommended action to fix this issue.
Correção
Improper Privilege Management
Incorrect Privilege Assignment
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Mocknest-Serverless