100 matches found
CVE-2023-48054: Improper Certificate Validation
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
CVE-2023-48054
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
CVE-2023-48054
CVE-2023-48054 concerns missing SSL certificate validation in localstack v2.3.2 , enabling a man-in-the-middle eavesdropping of communications between host and server. Connected advisories confirm the same vulnerability across sources (Red Hat, Veracode, GHSA, OSV, NVD, etc.). The provided docume...
CVE-2023-48054
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
LocalStack Security Vulnerabilities
LocalStack is a cloud service emulator from LocalStack open source. It can be run in a laptop or a single container in a CI environment. A security vulnerability exists in LocalStack version v2.3.2, which stems from a lack of SSL certificate validation, allowing an attacker to eavesdrop on...
CVE-2023-48054
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
Server-Side Request Forgery (SSRF)
localstack is vulnerable to server-side request forgery attacks. The application does not properly handle user-supplied data, which allows a malicious user to make arbitrary requests on the internal network, resulting in sensitive information retrieval or deletion...
Cross Site Scripting (XSS)
LocalStack is vulnerable to cross-site scripting XSS.The vulnerability exists due to lack of sanitization of user input which allows a remote attacker to inject and execute malicious code into the system...
Vulnerability Research Highlights 2021
At SonarSource we are constantly improving our code analyzers to help developers write Clean Code. The detection of severe code vulnerabilities plays an important role in this process so that applications are protected from attacks and security breaches. For this same reason, our research team...
Cross-site scripting in LocalStack
A Cross-site scripting XSS vulnerability exists in StackLift LocalStack...
GHSA-37M5-42QP-4QPR Cross-site scripting in LocalStack
A Cross-site scripting XSS vulnerability exists in StackLift LocalStack...
GHSA-HPR6-F4VQ-MXCH Command injection in LocalStack
The dashboard component of StackLift LocalStack allows attackers to inject arbitrary shell commands via the functionName parameter...
Command injection in LocalStack
The dashboard component of StackLift LocalStack allows attackers to inject arbitrary shell commands via the functionName parameter...
StackLift LocalStack Cross-Site Scripting Vulnerability
StackLift LocalStack is a StackLift open source application. Provides an easy-to-use testing framework for cloud applications. A cross-site scripting vulnerability exists in StackLift LocalStack version 0.12.6, which stems from a lack of proper validation of client-side data by the WEB applicatio...
OS Command Injection
localstack is vulnerable to OS command injection. An attacker is able to inject and execute arbitrary OS commands via the getlambdacode function through the functionName parameter...
StackLift LocalStack Command Injection Vulnerability
StackLift LocalStack is a StackLift open source application. Provides an easy-to-use testing framework for cloud applications. A command injection vulnerability exists in StackLift LocalStack version 0.12.6, which can be exploited by an attacker to inject arbitrary shell commands via the...
CVE-2021-32090
The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...
CVE-2021-32091
A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...
