62 matches found
Cross-site scripting in LocalStack
A Cross-site scripting XSS vulnerability exists in StackLift LocalStack...
Command injection in LocalStack
The dashboard component of StackLift LocalStack allows attackers to inject arbitrary shell commands via the functionName parameter...
GHSA-HPR6-F4VQ-MXCH Command injection in LocalStack
The dashboard component of StackLift LocalStack allows attackers to inject arbitrary shell commands via the functionName parameter...
StackLift LocalStack Cross-Site Scripting Vulnerability
StackLift LocalStack is a StackLift open source application. Provides an easy-to-use testing framework for cloud applications. A cross-site scripting vulnerability exists in StackLift LocalStack version 0.12.6, which stems from a lack of proper validation of client-side data by the WEB applicatio...
OS Command Injection
localstack is vulnerable to OS command injection. An attacker is able to inject and execute arbitrary OS commands via the getlambdacode function through the functionName parameter...
StackLift LocalStack Command Injection Vulnerability
StackLift LocalStack is a StackLift open source application. Provides an easy-to-use testing framework for cloud applications. A command injection vulnerability exists in StackLift LocalStack version 0.12.6, which can be exploited by an attacker to inject arbitrary shell commands via the...
CVE-2021-32090
The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...
CVE-2021-32091
A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...
CVE-2021-32091
A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...
Cross site scripting
A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...
PYSEC-2021-102
A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...
PYSEC-2021-102
A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...
PYSEC-2021-101
The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...
PYSEC-2021-101
The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...
Command injection
The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...
CVE-2021-32090
The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...
CVE-2021-32090
CVE-2021-32090 affects StackLift LocalStack 0.12.6. The vulnerability is a command-injection flaw in the dashboard component, exploitable through the functionName parameter to inject arbitrary shell commands. The NVD entry assigns a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vecto...
CVE-2021-32091
A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...
CVE-2021-32091
CVE-2021-32091 is a Cross-site Scripting (XSS) vulnerability in StackLift LocalStack 0.12.6. According to CNVD-2021-34109, it stems from a lack of proper validation of client-side data by the WEB application, enabling execution of client-side code. Other connected sources consistently describe th...
StackLift LocalStack 命令注入漏洞
StackLift LocalStack is a StackLift open source application. Provides an easy-to-use testing framework for cloud applications. A command injection vulnerability exists in StackLift LocalStack version 0.12.6, which can be exploited by an attacker to inject arbitrary shell commands via the...