CVE-2021-32090: Command Injection
Published May 7, 2021
·Updated
The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter.
Other sources
The dashboard component of StackLift LocalStack allows attackers to inject arbitrary shell commands via the functionName parameter.
Affected Software
2 affected componentsFixes available
pip/localstack<0.12.10
0.12.10
localstack localstack=0.12.6
Event History
May 7, 2021
CVE Published
via MITRE·03:52 AM
Data Sourced
via MITRE·03:52 AM
Description
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeaknessAffected Software
Jun 18, 2021
Advisory Published
via GitHub·06:38 PM
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2021-32090.
2
What is the severity of CVE-2021-32090?
The severity of CVE-2021-32090 is critical.
3
How does the vulnerability in StackLift LocalStack allow attackers to inject arbitrary shell commands?
The vulnerability in StackLift LocalStack allows attackers to inject arbitrary shell commands via the functionName parameter.
4
Which version of StackLift LocalStack is affected by CVE-2021-32090?
StackLift LocalStack version 0.12.10 is affected by CVE-2021-32090.
5
Where can I find more information about CVE-2021-32090?
You can find more information about CVE-2021-32090 at the following references: [1] [2] [3]