GHSA-6475-r3vj-m8vf
LowSummary
The vulnerability involves the ability to set an invalid value for the region input field when calling AWS services using the SDK. An actor with access to the environment where the SDK is used can set an invalid region value.
Risk Assessment
The risk is low (CVSS 3.7) and involves potential disruption of application functionality by using an invalid region, which may lead to errors in communication with AWS services.
Recommendation
It is recommended to update the AWS SDK to the latest version, which includes security enhancements to prevent the use of invalid region values.
Original NVD description (English source)
CVSSv3.1 Rating: 3.7 (LOW) Summary This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. A defense-in-depth enhancement