CVE-2019-10777

CVE-2019-10777 is a critical command injection vulnerability affecting aws-lambda versions prior to 1.0.5. An attacker can inject arbitrary commands into the "zipCmd" variable via the "config.FunctionName" parameter due to a lack of sanitization. With a CVSS score of 9.8, this vulnerability allows for complete compromise of confidentiality, integrity, and availability with low attack complexity and no user interaction required. While no public exploits or active exploitation have been observed, and community discussion is minimal, the high FAUCET Risk Score indicates its potential severity.