AWS ECR Public Vulnerability
BRANK

Let's go over a critical AWS Elastic Container Registry Public (ECR Public) vulnerability that allowed external actors to delete, update, and create ECR Public images, layers, and tags in registries and repositories that belong to other AWS Accounts, by abusing undocumented internal ECR Public API actions.

blog.lightspin.io
Related Topics: Amazon Web Services Security Vulnerability