PT-2021-19658

Name of the Vulnerable Software and Affected Versions: StackLift LocalStack version 0.12.6 Description: The issue allows attackers to inject arbitrary shell commands via the functionName parameter in the dashboard component. This could potentially lead to unauthorized access and execution of...

StackLift LocalStack command injection vulnerability

StackLift LocalStack is a StackLift open source application. Provides an easy-to-use testing framework for cloud applications. A command injection vulnerability exists in StackLift LocalStack version 0.12.6, which can be exploited by an attacker to inject arbitrary shell commands via the...

localstack.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1149889 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting localstack.com website and...