Lucene search
K

62 matches found

Github Security Blog
Github Security Blog
added 2021/06/18 6:38 p.m.88 views

Cross-site scripting in LocalStack

A Cross-site scripting XSS vulnerability exists in StackLift LocalStack...

6.1CVSS1.7AI score0.0024EPSS
Exploits1References5Affected Software1
Github Security Blog
Github Security Blog
added 2021/06/18 6:38 p.m.83 views

Command injection in LocalStack

The dashboard component of StackLift LocalStack allows attackers to inject arbitrary shell commands via the functionName parameter...

10CVSS5.8AI score0.00424EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2021/06/18 6:38 p.m.18 views

GHSA-HPR6-F4VQ-MXCH Command injection in LocalStack

The dashboard component of StackLift LocalStack allows attackers to inject arbitrary shell commands via the functionName parameter...

9.8CVSS9.5AI score0.00424EPSS
Exploits1References7
CNVD
CNVD
added 2021/05/11 12:0 a.m.8 views

StackLift LocalStack Cross-Site Scripting Vulnerability

StackLift LocalStack is a StackLift open source application. Provides an easy-to-use testing framework for cloud applications. A cross-site scripting vulnerability exists in StackLift LocalStack version 0.12.6, which stems from a lack of proper validation of client-side data by the WEB applicatio...

6.1CVSS6.1AI score0.0024EPSS
Exploits1References1
Veracode
Veracode
added 2021/05/10 4:23 a.m.16 views

OS Command Injection

localstack is vulnerable to OS command injection. An attacker is able to inject and execute arbitrary OS commands via the getlambdacode function through the functionName parameter...

9.8CVSS5.3AI score0.00424EPSS
Exploits1References3Affected Software1
CNVD
CNVD
added 2021/05/10 12:0 a.m.5 views

StackLift LocalStack Command Injection Vulnerability

StackLift LocalStack is a StackLift open source application. Provides an easy-to-use testing framework for cloud applications. A command injection vulnerability exists in StackLift LocalStack version 0.12.6, which can be exploited by an attacker to inject arbitrary shell commands via the...

10CVSS7.4AI score0.00424EPSS
Exploits1References1
OSV
OSV
added 2021/05/07 5:15 a.m.17 views

CVE-2021-32090

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...

9.8CVSS9.5AI score
Exploits0References2
OSV
OSV
added 2021/05/07 5:15 a.m.13 views

CVE-2021-32091

A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...

6.1CVSS6.1AI score
Exploits0References2
NVD
NVD
added 2021/05/07 5:15 a.m.9 views

CVE-2021-32091

A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...

6.1CVSS0.0024EPSS
Exploits1References2
Prion
Prion
added 2021/05/07 5:15 a.m.17 views

Cross site scripting

A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...

4.3CVSS6AI score0.0024EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2021/05/07 5:15 a.m.19 views

PYSEC-2021-102

A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...

6.1CVSS2AI score0.0024EPSS
Exploits1References3
PyPA
PyPA
added 2021/05/07 5:15 a.m.4 views

PYSEC-2021-102

A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...

6.1CVSS6.2AI score0.0024EPSS
Exploits1References3Affected Software1
PyPA
PyPA
added 2021/05/07 5:15 a.m.4 views

PYSEC-2021-101

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...

10CVSS7.3AI score0.00424EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2021/05/07 5:15 a.m.18 views

PYSEC-2021-101

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...

10CVSS5.9AI score0.00424EPSS
Exploits1References3
Prion
Prion
added 2021/05/07 5:15 a.m.13 views

Command injection

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...

10CVSS9.5AI score0.00424EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/05/07 3:52 a.m.9 views

CVE-2021-32090

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...

9.8AI score0.00424EPSS
Exploits1References2
CVE
CVE
added 2021/05/07 3:52 a.m.79 views

CVE-2021-32090

CVE-2021-32090 affects StackLift LocalStack 0.12.6. The vulnerability is a command-injection flaw in the dashboard component, exploitable through the functionName parameter to inject arbitrary shell commands. The NVD entry assigns a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vecto...

10CVSS9.4AI score0.00424EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/05/07 3:52 a.m.8 views

CVE-2021-32091

A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...

6.2AI score0.0024EPSS
Exploits1References2
CVE
CVE
added 2021/05/07 3:52 a.m.63 views

CVE-2021-32091

CVE-2021-32091 is a Cross-site Scripting (XSS) vulnerability in StackLift LocalStack 0.12.6. According to CNVD-2021-34109, it stems from a lack of proper validation of client-side data by the WEB application, enabling execution of client-side code. Other connected sources consistently describe th...

6.1CVSS6AI score0.0024EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2021/05/07 12:0 a.m.2 views

StackLift LocalStack 命令注入漏洞

StackLift LocalStack is a StackLift open source application. Provides an easy-to-use testing framework for cloud applications. A command injection vulnerability exists in StackLift LocalStack version 0.12.6, which can be exploited by an attacker to inject arbitrary shell commands via the...

10CVSS6AI score0.00424EPSS
Exploits1References3
Rows per page
Query Builder