Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Banji180

#24363of 53,630
9.8Total CVSS
Vulnerabilities · 1
PT-2022-28039
9.8
2022-12-24
Amazon · Aws Sdk · CVE-2022-4725
**Name of the Vulnerable Software and Affected Versions** AWS SDK version 2.59.0 **Description** A critical issue affects the function `XpathUtils` of the file `aws-android-sdk-core/src/main/java/com/amazonaws/util/XpathUtils.java` of the component XML Parser. The manipulation leads to server-side request forgery. **Recommendations** Upgrade to version 2.59.1 to address this issue. As a temporary workaround, consider restricting the use of the `XpathUtils` function until the patch is applied.