AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access

Attributed metadata history

Up to 100 retained publisher events per page for 633ca5dddebf092a0b30297f4f1c7e17ea3e9298f132b8426a7490437ded88c8. Withdrawals and unavailable references remain attributed to their publishers.

intelligence_src_d11443da85ea659d49

observed · 2026-10-12 15:37:03 UTC

available

Fingerprint: 46fd50ac705e064c7517d97d61b5ec511c9b1ada6209622159dd39573ba08e5c

intelligence_src_d11443da85ea659d49

observed · 2026-10-12 15:37:03 UTC

The AWS AppSync service could be coerced to assume arbitrary roles in other customers' accounts which trusted the AppSync service. This was due to insufficient validation of a serviceRoleArn parameter (caused by a case-sensitivity parsing issue). With this vulnerability, if an adversary knew the ARN of the role associated with AppSync in the target account, they could use it invoke arbitrary AWS API calls.

Fingerprint: 223ed8751dc502247890fe9a438006f99c47397cd6e9c84663aef962320c723c