Vulnerabilities

TI-2023-26017 CVE-2023-48054 · GHSA-8633-g3ph-97rp

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on…

LOW 34

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00301 Published 2023-11-16 No fix listed CWE-295

TI-2021-12043 CVE-2021-32090 · GHSA-hpr6-f4vq-mxch

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject…

MEDIUM 46

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02113 Published 2021-05-07 Fixed in 0.12.10 CWE-78

TI-2021-12044 CVE-2021-32091 · GHSA-37m5-42qp-4qpr

A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6.

LOW 29

A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00846 Published 2021-05-07 No fix listed CWE-79

Vulnerabilities

Filters

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on…

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject…

A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6.