AWS Signature Disclosure in www.digitalsellz.com allows access to S3

Summary

@skorov discovered a vulnerability that allows a user can gain access to S3. This Vulnerability has been fixed.

An information disclosure vulnerability was found that allowed an attacker to have arbitrary AWS requests signed with the secret key. The signature could then be used to view, edit, upload and delete any file in the S3 bucket.

DigitalSellz team had great communication and acted quickly to remediate the vulnerability.