Beveiligingsadvies

CVE-2025-4318

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-05 18:16:34

Laatst bijgewerkt 2026-07-29 15:18:10

Toegewezen door AMZN

CVSS-score 9.0

Status PUBLISHED

Beschrijving

The AWS Amplify Studio UI component property expressions in the aws-amplify/amplify-codegen-ui package lack input validation. This could potentially allow an authenticated user who has access to create or modify components to run arbitrary JavaScript code during the component rendering and build process.

← Alle CVE's bekijken Bekijk op cve.org ↗