AWS VDP

AWS VDP 的公开漏洞报告、类别分布与常见资产。

攻击面

弱点类别分布

• 信息泄露27
• 代码执行9
• 访问控制7
• 身份认证5
• 内存破坏3
• 跨站脚本2
• 错误配置2
• 其他弱点2
• 业务逻辑1
• SQL 注入1
• 服务端请求伪造1
• 密码学缺陷1

主要弱点

• Insufficient Logging23
• 操作系统命令注入4
• 访问控制缺陷（通用）2
• Incorrect Privilege Assignment2
• 代码注入2
• Unlabeled2
• Array Index Underflow2
• 命令注入（通用）1
• Authentication Bypass Using an Alternate Path or Channel1
• 证书校验不当1

常见资产

• All API's called by the AWS CLIAPI · 18
• Amazon BedrockOTHER · 5
• · 5
• https://github.com/kubernetes-sigs/aws-encryption-providerSOURCE_CODE · 4
• https://github.com/awslabs/*WILDCARD · 3
• *.aws.devOTHER · 3
• https://github.com/aws/aws-cdkSOURCE_CODE · 2
• https://*.aws/*OTHER · 2
• Amazon Elastic Compute Cloud (Amazon EC2)OTHER · 2
• https://*.aws.amazon.com/*OTHER · 2

高票报告

当前状态 48 份 · 全部 61

1. 111
   OS Command Injection in `aws-cdk-lib` NodejsFunction via Unsanitized `OsCommand` Helper (Supply Chain RCE)代码执行 · 2026-07-07 · 高危
   $0操作系统命令注入
2. 83
   XSS on Amazon Aquisition: elemental跨站脚本 · 2025-07-22 · 高危
   $0反射型 XSS
3. 75
   Non-Production API Endpoints for the Forecast Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration信息泄露 · 2025-03-25 · 中危
   $0Insufficient Logging
4. 69
   Non-Production API Endpoints for the Amazon S3 Tables Service Fails to Log to CloudTrail Resulting in Silent Permission Enumeration信息泄露 · 2026-07-03 · 中危
   $0Insufficient Logging
5. 69
   Unlimited Reuse of Coupon Code Allows Free Shipping on All Orders on ██████████业务逻辑 · 2026-02-09 · 低危
   $0业务逻辑错误
6. 68
   A potential risk in the aws-lambda-ecs-run-task which can be used to privilege escalation.访问控制 · 2024-12-27 · 中危
   $0Incorrect Privilege Assignment
7. 62
   External service interaction (HTTP)服务端请求伪造 · 2024-10-04 · 高危
   $0SSRF
8. 61
   AWS | Self Registration Internal LibreChat : Access to internal/proprietary LLMs身份认证 · 2025-08-26 · 低危
   $0Authentication Bypass Using an Alternate Path or Channel
9. 59
   QuickSight Authorization Bypass: Chat Agents Accessible Despite Custom Permissions Denial访问控制 · 2026-05-12 · 低危
   $0Unlabeled
10. 56
    (Part 2) Non-Production API Endpoints for the Datazone Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration信息泄露 · 2025-04-09 · 中危
    $0Insufficient Logging
11. 55
    A potential risk in the experimental-programmatic-access-ccft which can be used to privilege escalation.访问控制 · 2024-11-07 · 高危
    $0Incorrect Privilege Assignment
12. 54
    Kiro IDE Stores Auth Tokens with World-Readable Permissions (0644)访问控制 · 2026-07-09 · 中危
    $0Incorrect Default Permissions
13. 53
    AWS *.a2z.com | Unauthenticated Clickhouse UI : Database access + SSRF身份认证 · 2026-07-23 · 高危
    $0认证绕过
14. 50
    Non-Production API Endpoints for the Datazone Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration信息泄露 · 2025-02-26 · 中危
    $0Insufficient Logging
15. 48
    Bedrock AgentCore Starter Toolkit Creates Gateway IAM Roles Without Confused Deputy Protections访问控制 · 2026-07-15 · 中危
    $0Incorrect Permission Assignment for Critical Resource
16. 48
    Command Injection via Unsanitized Bundling Options in `aws-cdk-lib/aws-lambda-nodejs`代码执行 · 2026-06-12 · 高危
    $0操作系统命令注入
17. 48
    GitHub Retired UsernameTakeover From [aws/████████]代码执行 · 2026-08-04 · 低危
    $0Inclusion of Functionality from Untrusted Control Sphere
18. 45
    bedrock-mantle.api.aws accepts Bedrock API keys outside the IAM Deny, CloudTrail signal, and invocation logging AWS publishes for Bedrock keys错误配置 · 2026-07-15 · 中危
    $0Insecure Default Initialization of Resource
19. 45
    Non-Production API Endpoints for the DocumentDB Elastic Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration信息泄露 · 2025-03-12 · 中危
    $0Insufficient Logging
20. 41
    V1Plugin.Decrypt panics on empty ciphertext (Remote DoS)内存破坏 · 2026-05-29 · 中危
    $0Array Index Underflow
21. 40
    Non-Production API Endpoint for the ElastiCache Service Fails to Log to CloudTrail Resulting in Silent Permission Enumeration信息泄露 · 2025-04-26 · 中危
    $0Insufficient Logging
22. 38
    Non-Production API Endpoints for the bedrock-agent Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration信息泄露 · 2025-05-28 · 中危
    $0Insufficient Logging
23. 37
    Non-Production API Endpoints for the ssm Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration信息泄露 · 2025-04-24 · 中危
    $0Insufficient Logging
24. 36
    Responsible disclosure - public S3 bucket exposing JSON/config files信息泄露 · 2025-11-15 · 低危
    $0信息泄露
25. 33
    Firecracker Out-of-bounds Read/Write Local Privilege Escalation Vulnerability内存破坏 · 2026-06-11 · 低危
    $0越界读