Product
An incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications (versions 1.0.7-1.0.10) allows authenticated users with repository push access to perform unauthorized privilege escalation and resource modification across an AWS account.