writeups.xyz / A Confused Deputy Vulnerability in AWS AppSync

Submitter : c2a

Date: 21 November 2022

Bounty : undisclosed

Vulnerabilities :

• Confused Deputy
• Cloud
• Privilege Escalation

Programs :

• AWS

Authors :

• Nick Frichette (@Frichette_n)

Link :
https://securitylabs.datadoghq.com/articles/appsync-vulnerability-disclosure/