漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Path Traversal in AWS SAM CLI allows file copy to build container
Vulnerability Description
When running the AWS Serverless Application Model Command Line Interface (SAM CLI) build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A user could leverage the elevated permissions to access restricted files via symlinks and copy them to a more permissive location on the container. Users should upgrade to v1.133.0 or newer and ensure any forked or derivative code is patched to incorporate the new fixes.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Vulnerability Type
CWE-61
Vulnerability Title
AWS SAM CLI 安全漏洞
Vulnerability Description
AWS SAM CLI是Amazon Web Services开源的一个使用 AWS SAM 构建、测试、调试和部署无服务器应用程序的 CLI 工具。 AWS SAM CLI存在安全漏洞，该漏洞源于符号链接可能导致访问主机特权文件。
CVSS Information
N/A
Vulnerability Type
N/A