writeups.xyz / AWS SageMaker Jupyter Notebook Instance Takeover

Submitter : c2a

Date: 2 December 2021

Bounty : undisclosed

Vulnerabilities :

• Self-XSS
• CSRF
• RCE

Programs :

• AWS

Authors :

• Gafnit Amiga (@Gafnitav)

Link :
https://blog.lightspin.io/aws-sagemaker-notebook-takeover-vulnerability