3 ms·
Just watch out, there's a whole class of vulnerabilities around tricking a more privileged piece of software into doing something on your behalf https://docs.aw
by mdaniel 3y ago
Just watch out, there's a whole class of vulnerabilities around tricking a more privileged piece of software into doing something on your behalf https://docs.aws.amazon.com/IAM/latest/UserGuide/confused-deputy.html https://docs.aws.amazon.com/IAM/latest/UserGuide/confused-de...
and that's not even getting into the assorted awesome HTTP request smuggling and SSRF vulns when 3 or more http implementations rub up against one another