References https://nvd.nist.gov/vuln/detail/CVE-2020-28472 https://security.snyk.io/vuln/SNYK-JS-AWSSDK-1059424 https://vulners.com/cve/CVE-2020-28472 https://www.acunetix.com/vulnerabilities/sca/cve-2020-28472-vulnerability-in-npm-package-aws-sdk/ https://www.cve.org/CVERecord?id=CVE-2020-28472 https://cve.imfht.com/?product=File+&+Removable+Media+Protection+(FRP)=&page=24
Related VulnerabilitiesPoCCVE-2026-9133: Amazon rabbitmq-aws 0.1.0 through 0.2.0 - Arbitrary File ReadPoCCVE-2024-37261: WP-Lister Lite for Amazon <= 2.6.16 - Cross-Site ScriptingWordPress Auto Amazon Links /wp-json/wp/v2/aal_ajax_unit_loading 文件读取漏洞(CVE-2025-11451)PoCCVE-2014-4577: WP AmASIN – The Amazon Affiliate Shop - Local File InclusionPoCCVE-2017-14622: WordPress 2kb Amazon Affiliates Store <2.1.1 - Cross-Site ScriptingPoCeks-managed-policy-ecr-access: Use AWS-managed policy to access Amazon ECR RepositoriesPoCs3-server-side-encryption: Server-Side Encryption on Amazon S3 BucketsPoCamazon-aax-eu-csp-bypass: Content-Security-Policy Bypass - Amazon AAX EUPoCamazon-media-csp-bypass: Content-Security-Policy Bypass - Amazon MediaPoCamazon-romania-csp-bypass: Content-Security-Policy Bypass - Amazon RomaniaPoCamazon-s3-elysium-csp-bypass: Content-Security-Policy Bypass - Amazon S3 ElysiumPoCamazon-mws-auth-token-value: Amazon MWS Authentication Token - DetectPoCamazon-docker-config: Dockerrun AWS Configuration Page - Detect