AWS VDP

AWS VDP 的公开漏洞报告、类别分布与常见资产。

攻击面

弱点类别分布

• 信息泄露27
• 代码执行9
• 访问控制7
• 身份认证5
• 内存破坏3
• 跨站脚本2
• 错误配置2
• 其他弱点2
• 业务逻辑1
• SQL 注入1
• 服务端请求伪造1
• 密码学缺陷1

主要弱点

• Insufficient Logging23
• 操作系统命令注入4
• 访问控制缺陷（通用）2
• Incorrect Privilege Assignment2
• 代码注入2
• Unlabeled2
• Array Index Underflow2
• 命令注入（通用）1
• Authentication Bypass Using an Alternate Path or Channel1
• 证书校验不当1

常见资产

• All API's called by the AWS CLIAPI · 18
• Amazon BedrockOTHER · 5
• · 5
• https://github.com/kubernetes-sigs/aws-encryption-providerSOURCE_CODE · 4
• https://github.com/awslabs/*WILDCARD · 3
• *.aws.devOTHER · 3
• https://github.com/aws/aws-cdkSOURCE_CODE · 2
• https://*.aws/*OTHER · 2
• Amazon Elastic Compute Cloud (Amazon EC2)OTHER · 2
• https://*.aws.amazon.com/*OTHER · 2

高票报告

当前状态 61 份 · 全部 61

1. 111
   OS Command Injection in `aws-cdk-lib` NodejsFunction via Unsanitized `OsCommand` Helper (Supply Chain RCE)代码执行 · 2026-07-07 · 高危
   $0操作系统命令注入
2. 83
   XSS on Amazon Aquisition: elemental跨站脚本 · 2025-07-22 · 高危
   $0反射型 XSS
3. 75
   Non-Production API Endpoints for the Forecast Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration信息泄露 · 2025-03-25 · 中危
   $0Insufficient Logging
4. 69
   Non-Production API Endpoints for the Amazon S3 Tables Service Fails to Log to CloudTrail Resulting in Silent Permission Enumeration信息泄露 · 2026-07-03 · 中危
   $0Insufficient Logging
5. 69
   Unlimited Reuse of Coupon Code Allows Free Shipping on All Orders on ██████████业务逻辑 · 2026-02-09 · 低危
   $0业务逻辑错误
6. 68
   A potential risk in the aws-lambda-ecs-run-task which can be used to privilege escalation.访问控制 · 2024-12-27 · 中危
   $0Incorrect Privilege Assignment
7. 62
   External service interaction (HTTP)服务端请求伪造 · 2024-10-04 · 高危
   $0SSRF
8. 61
   AWS | Self Registration Internal LibreChat : Access to internal/proprietary LLMs身份认证 · 2025-08-26 · 低危
   $0Authentication Bypass Using an Alternate Path or Channel
9. 59
   QuickSight Authorization Bypass: Chat Agents Accessible Despite Custom Permissions Denial访问控制 · 2026-05-12 · 低危
   $0Unlabeled
10. 56
    (Part 2) Non-Production API Endpoints for the Datazone Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration信息泄露 · 2025-04-09 · 中危
    $0Insufficient Logging
11. 55
    Password Reuse Vulnerability on AWS Sign-in Page via Password Reset Flow leads to Security Policy Violation身份认证 · 2026-02-27 · 低危
    $0Weak Password Requirements
12. 55
    A potential risk in the experimental-programmatic-access-ccft which can be used to privilege escalation.访问控制 · 2024-11-07 · 高危
    $0Incorrect Privilege Assignment
13. 55
    Reflected XSS on Amazon EC2 Instance跨站脚本 · 2024-12-25 · 高危
    $0Reflected XSS
14. 54
    Kiro IDE Stores Auth Tokens with World-Readable Permissions (0644)访问控制 · 2026-07-09 · 中危
    $0Incorrect Default Permissions
15. 53
    AWS *.a2z.com | Unauthenticated Clickhouse UI : Database access + SSRF身份认证 · 2026-07-23 · 高危
    $0认证绕过
16. 53
    Bedrock Guardrails Evasion with Prompt Formatting其他弱点 · 2025-05-16 · 低危
    $0Unlabeled
17. 50
    Non-Production API Endpoints for the Datazone Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration信息泄露 · 2025-02-26 · 中危
    $0Insufficient Logging
18. 48
    Bedrock AgentCore Starter Toolkit Creates Gateway IAM Roles Without Confused Deputy Protections访问控制 · 2026-07-15 · 中危
    $0Incorrect Permission Assignment for Critical Resource
19. 48
    Command Injection via Unsanitized Bundling Options in `aws-cdk-lib/aws-lambda-nodejs`代码执行 · 2026-06-12 · 高危
    $0操作系统命令注入
20. 48
    GitHub Retired UsernameTakeover From [aws/████████]代码执行 · 2026-08-04 · 低危
    $0Inclusion of Functionality from Untrusted Control Sphere
21. 46
    Information Disclosure Due To exposed .env file (Directory Listing) at ████████信息泄露 · 2024-10-22 · 高危
    $0目录列表泄露
22. 45
    bedrock-mantle.api.aws accepts Bedrock API keys outside the IAM Deny, CloudTrail signal, and invocation logging AWS publishes for Bedrock keys错误配置 · 2026-07-15 · 中危
    $0Insecure Default Initialization of Resource
23. 45
    Non-Production API Endpoints for the DocumentDB Elastic Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration信息泄露 · 2025-03-12 · 中危
    $0Insufficient Logging
24. 43
    Arbitrary Code Execution via Scanner Bypass in **aws-diagram-mcp-server** `exec()` Namespace代码执行 · 2026-03-09 · 低危
    $0Unlabeled
25. 43
    CVE-2020-5902错误配置 · 2024-12-25 · 严重
    $0Using Components with Known Vulnerabilities