Command injection

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...

CVE-2021-32091

CVE-2021-32091 is a Cross-site Scripting (XSS) vulnerability in StackLift LocalStack 0.12.6. According to CNVD-2021-34109, it stems from a lack of proper validation of client-side data by the WEB application, enabling execution of client-side code. Other connected sources consistently describe th...