PT-2021-19659

Name of the Vulnerable Software and Affected Versions: StackLift LocalStack version 0.12.6 Description: A Cross-site scripting XSS issue exists. Recommendations: For version 0.12.6, update to a version that fixes this issue. At the moment, there is no information about a newer version that contai...

CVE-2021-32090: Improper Neutralization of Special Elements used in an OS Command

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...