CVE-2021-32090

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...

PYSEC-2021-101

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...

PYSEC-2021-102

A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...

PYSEC-2021-101

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...

CVE-2021-32090

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...

CVE-2021-32090

CVE-2021-32090 affects StackLift LocalStack 0.12.6. The vulnerability is a command-injection flaw in the dashboard component, exploitable through the functionName parameter to inject arbitrary shell commands. The NVD entry assigns a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vecto...

CVE-2021-32090

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...

CVE-2021-32091

CVE-2021-32091 is a Cross-site Scripting (XSS) vulnerability in StackLift LocalStack 0.12.6. According to CNVD-2021-34109, it stems from a lack of proper validation of client-side data by the WEB application, enabling execution of client-side code. Other connected sources consistently describe th...

CVE-2021-32091

A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...

CVE-2021-32091

A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...

PT-2021-19659

Name of the Vulnerable Software and Affected Versions: StackLift LocalStack version 0.12.6 Description: A Cross-site scripting XSS issue exists. Recommendations: For version 0.12.6, update to a version that fixes this issue. At the moment, there is no information about a newer version that contai...

CVE-2021-32090: Improper Neutralization of Special Elements used in an OS Command

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...

CVE-2021-32091: Improper Neutralization of Input During Web Page Generation

A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...

StackLift LocalStack 跨站脚本漏洞

StackLift LocalStack is a StackLift open source application. Provides an easy-to-use testing framework for cloud applications. A cross-site scripting vulnerability exists in StackLift LocalStack version 0.12.6, which stems from a lack of proper validation of client-side data by the WEB applicatio...

StackLift LocalStack 命令注入漏洞

StackLift LocalStack is a StackLift open source application. Provides an easy-to-use testing framework for cloud applications. A command injection vulnerability exists in StackLift LocalStack version 0.12.6, which can be exploited by an attacker to inject arbitrary shell commands via the...

PT-2021-19658

Name of the Vulnerable Software and Affected Versions: StackLift LocalStack version 0.12.6 Description: The issue allows attackers to inject arbitrary shell commands via the functionName parameter in the dashboard component. This could potentially lead to unauthorized access and execution of...

localstack.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1149889 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting localstack.com website and...