AWS CloudShell Terminal Escape Injection / Remote Code Execution
Posted on 10 May 2021
The javascript terminal emulator used by AWS CloudShell handles certain terminal escape codes incorrectly. This can lead to remote code execution if attacker controlled data is displayed in a CloudShell instance.
