DevThe Hacker Newsabout 4 hours ago
AWS Kiro Flaw Enabled Remote Code Execution
1 min read
A flaw in AWS's Kiro IDE let a poisoned web page rewrite the tool's configuration file and run attacker code on a developer's machine, bypassing the approval step. Intezer and Kodem Security found the attack worked within one or two tries. AWS patched the issue in version 0.11.130, and no CVE was assigned.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyAmazon
Summary by ByteBrief
