CWE-117,93 - Log injection in DatadogAPICallFunction for datadog_integration_api_call_v2.yaml

[ycrc5]

Expected Behavior

No vulnerabilities found for Cloudformation lambda

Actual Behavior

Getting vulnerability for CWE-117,93 - Log injection in DatadogAPICallFunction. Using template https://github.com/DataDog/cloudformation-template/blob/master/aws_quickstart/datadog_integration_api_call_v2.yaml .

Steps to Reproduce the Problem

1. Deploy template https://github.com/DataDog/cloudformation-template/blob/master/aws_quickstart/datadog_integration_api_call_v2.yaml
2. Use code scanning tools (such as aws inspector)
3. Check findings.

Specifications

• Datadog CloudFormation template version: Latest version

Stacktrace

Paste here