71 matches found
CVE-2023-48054
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
CVE-2023-48054
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
Cicd-Goat - A Deliberately Vulnerable CI/CD Environment
Deliberately vulnerable CI/CD environment. Hack CI/CD pipelines, capture the flags. Created by Cider Security. Description The CI/CD Goat project allows engineers and security practitioners to learn and practice CI/CD security through a set of 10 challenges, enacted against a real, full blown CI/...
Server-Side Request Forgery (SSRF)
localstack is vulnerable to server-side request forgery attacks. The application does not properly handle user-supplied data, which allows a malicious user to make arbitrary requests on the internal network, resulting in sensitive information retrieval or deletion...
Cross Site Scripting (XSS)
LocalStack is vulnerable to cross-site scripting XSS.The vulnerability exists due to lack of sanitization of user input which allows a remote attacker to inject and execute malicious code into the system...
Vulnerability Research Highlights 2021
At SonarSource we are constantly improving our code analyzers to help developers write Clean Code. The detection of severe code vulnerabilities plays an important role in this process so that applications are protected from attacks and security breaches. For this same reason, our research team...
GHSA-37M5-42QP-4QPR Cross-site scripting in LocalStack
A Cross-site scripting XSS vulnerability exists in StackLift LocalStack...
Cross-site scripting in LocalStack
A Cross-site scripting XSS vulnerability exists in StackLift LocalStack...
GHSA-HPR6-F4VQ-MXCH Command injection in LocalStack
The dashboard component of StackLift LocalStack allows attackers to inject arbitrary shell commands via the functionName parameter...
Command injection in LocalStack
The dashboard component of StackLift LocalStack allows attackers to inject arbitrary shell commands via the functionName parameter...
StackLift LocalStack Cross-Site Scripting Vulnerability
StackLift LocalStack is a StackLift open source application. Provides an easy-to-use testing framework for cloud applications. A cross-site scripting vulnerability exists in StackLift LocalStack version 0.12.6, which stems from a lack of proper validation of client-side data by the WEB applicatio...
OS Command Injection
localstack is vulnerable to OS command injection. An attacker is able to inject and execute arbitrary OS commands via the getlambdacode function through the functionName parameter...
StackLift LocalStack Command Injection Vulnerability
StackLift LocalStack is a StackLift open source application. Provides an easy-to-use testing framework for cloud applications. A command injection vulnerability exists in StackLift LocalStack version 0.12.6, which can be exploited by an attacker to inject arbitrary shell commands via the...
CVE-2021-32091
A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...
CVE-2021-32090
The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...
CVE-2021-32091
A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...
Cross site scripting
A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...
CVE-2021-32091
A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...