Amazon Awslabs Sandbox Accounts For Events vulnerabilities

2 CVEs affecting Amazon Awslabs Sandbox Accounts For Events, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-51386, published 2023-12-22.

More from Amazon.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-50928, published 2023-12-22. Critical severity, CVSS 9.0. EPSS: 0.4% chance of exploitation in the next 30 days. "Sandbox Accounts for Events" provides multiple, temporary AWS accounts to a number of authenticated users simultaneously via a browser-based GUI. Authenticated users could potentially claim and…
• CVE-2023-51386, published 2023-12-22. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Sandbox Accounts for Events provides multiple, temporary AWS accounts to a number of authenticated users simultaneously via a browser-based GUI. Authenticated users could potentially read data from…