CVE-2021-32091: XSS
Published May 7, 2021
·Updated
A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6.
Affected Software
2 affected components
pip/localstack<=0.12.10
localstack localstack=0.12.6
Event History
May 7, 2021
CVE Published
via MITRE·03:52 AM
Data Sourced
via MITRE·03:52 AM
Description
Jun 18, 2021
Advisory Published
via GitHub·06:38 PM
Frequently Asked Questions
1
What is CVE-2021-32091?
CVE-2021-32091 is a Cross-site scripting (XSS) vulnerability in StackLift LocalStack 0.12.6.
2
What is the severity of CVE-2021-32091?
The severity of CVE-2021-32091 is medium, with a severity value of 6.1.
3
How does CVE-2021-32091 affect the software?
CVE-2021-32091 affects StackLift LocalStack version 0.12.6.
4
Are there any references for CVE-2021-32091?
Yes, you can find more information about CVE-2021-32091 at the following references: [reference 1](https://blog.sonarsource.com/hack-the-stack-with-localstack) and [reference 2](https://portswigger.net/daily-swig/localstack-zero-day-vulnerabilities-chained-to-achieve-remote-takeover-of-local-instances).
5
Is there a Common Weakness Enumeration (CWE) associated with CVE-2021-32091?
Yes, the Common Weakness Enumeration (CWE) associated with CVE-2021-32091 is CWE-79.