https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T10:31:17.588244+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-50928 CVE-2023-50928 — sandbox-accounts-for-events security misconfiguration leads to budget exceed 2026-10-08T10:31:17.589407+00:00

Affected: awslabs sandbox-accounts-for-events

"Sandbox Accounts for Events" provides multiple, temporary AWS accounts to a number of authenticated users simultaneously via a browser-based GUI. Authenticated users could potentially claim and access empty AWS accounts by sending request payloads to the account API containing non-existent event ids and self-defined budget & duration. This issue only affects cleaned AWS accounts, it is not possible to access AWS accounts in use or existing data/infrastructure. This issue has been patched in version 1.1.0.