Description

LoadZilla LLC LoadLogic v1.4.3 was discovered to contain insecure permissions vulnerability which allows a remote attacker to execute arbitrary code via the LogicLoadEc2DeployLambda and CredsGenFunction function.

Related CPE's

Could not find any relations

References

https://github.com/zolaer9527/serverless-app/security/advisories/GHSA-3ggq-wrf4-c88v

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0

Secondary
CWE-266

CVSS impact metrics

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

7.5 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Awaiting analysis

Published

2024-09-30T18:15:06.067

1 week ago

Last modified

2024-10-04T13:51:25.567

4 days ago