Executive brief
AWS SDK for PHP has CloudFront Policy Document Injection via Special Characters
Affected products
- Packagist aws/aws-sdk-php
Junglewise Threat Intelligence
Severity: medium · CVSS 4 · Published 2026-03-27
Technologies: aws/aws-sdk-php (Packagist). Vendors: Packagist.
AWS SDK for PHP has CloudFront Policy Document Injection via Special Characters