Where
-Infinity
0
Severity
9.8
OS Command Injection, Command Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In aws-lambda versions prior to version 1.0.5, the "config.FunctioName" is used to construct the argument used within the "exec" function without any sanitization. It is possible for a user to inject arbitrary commands to the "zipCmd" used within "config.FunctionName".

First published (updated )
EOL
May 31, 2027
Support Ends
Mar 31, 2027

End of life: 5/31/2027, End of support: 3/31/2027

First published (updated )
EOL
May 31, 2027
Support Ends
Mar 31, 2027

End of life: 5/31/2027, End of support: 3/31/2027

First published (updated )
EOL
Jan 10, 2029
Support Ends
Oct 31, 2028

End of life: 1/10/2029, End of support: 10/31/2028

First published (updated )
EOL
Jan 10, 2029
Support Ends
Oct 31, 2028

End of life: 1/10/2029, End of support: 10/31/2028

First published (updated )
EOL
Aug 31, 2029
Support Ends
Jun 30, 2029

End of life: 8/31/2029, End of support: 6/30/2029

First published (updated )
EOL
Aug 31, 2029
Support Ends
Jun 30, 2029

End of life: 8/31/2029, End of support: 6/30/2029

First published (updated )
EOL
Aug 31, 2029
Support Ends
Jun 30, 2029

End of life: 8/31/2029, End of support: 6/30/2029

First published (updated )
EOL
Aug 31, 2029
Support Ends
Jun 30, 2029

End of life: 8/31/2029, End of support: 6/30/2029

EOL
May 3, 2023
Support Ends
Apr 3, 2023

End of life: 5/3/2023, End of support: 4/3/2023

First published (updated )
EOL
May 3, 2023
Support Ends
Apr 3, 2023

End of life: 5/3/2023, End of support: 4/3/2023

First published (updated )
EOL
Mar 31, 2022
Support Ends
Jul 30, 2021

End of life: 3/31/2022, End of support: 7/30/2021

First published (updated )
EOL
Mar 31, 2022
Support Ends
Jul 30, 2021

End of life: 3/31/2022, End of support: 7/30/2021

First published (updated )
EOL
Mar 6, 2020
Support Ends
Mar 6, 2020

End of life: 3/6/2020, End of support: 3/6/2020

First published (updated )
EOL
Mar 6, 2020
Support Ends
Mar 6, 2020

End of life: 3/6/2020, End of support: 3/6/2020

First published (updated )
EOL
May 30, 2019
Support Ends
May 30, 2019

End of life: 5/30/2019, End of support: 5/30/2019

First published (updated )
EOL
May 30, 2019
Support Ends
May 30, 2019

End of life: 5/30/2019, End of support: 5/30/2019

First published (updated )
EOL
Aug 12, 2019
Support Ends
Aug 12, 2019

End of life: 8/12/2019, End of support: 8/12/2019

First published (updated )
EOL
Aug 12, 2019
Support Ends
Aug 12, 2019

End of life: 8/12/2019, End of support: 8/12/2019

First published (updated )
EOL
May 30, 2022
Support Ends
Jul 15, 2021

End of life: 5/30/2022, End of support: 7/15/2021

First published (updated )
EOL
May 30, 2022
Support Ends
Jul 15, 2021

End of life: 5/30/2022, End of support: 7/15/2021

First published (updated )
EOL
Oct 31, 2016
Support Ends
Aug 30, 2016

End of life: 10/31/2016, End of support: 8/30/2016

First published (updated )
EOL
Oct 31, 2016
Support Ends
Aug 30, 2016

End of life: 10/31/2016, End of support: 8/30/2016

First published (updated )
EOL
Aug 31, 2029
Support Ends
Jun 30, 2029

End of life: 8/31/2029, End of support: 6/30/2029

First published (updated )
EOL
Aug 31, 2029
Support Ends
Jun 30, 2029

End of life: 8/31/2029, End of support: 6/30/2029

First published (updated )
EOL
Jul 1, 2027
Support Ends
Apr 30, 2027

End of life: 7/1/2027, End of support: 4/30/2027

First published (updated )
EOL
Jul 1, 2027
Support Ends
Apr 30, 2027

End of life: 7/1/2027, End of support: 4/30/2027

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203