CVE-2023-48054: High severity localstack vulnerability
Missing SSL certificate validation in localstack allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.
Other sources
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-48054?
CVE-2023-48054 is a vulnerability that allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack due to missing SSL certificate validation in localstack v2.3.2.
How severe is CVE-2023-48054?
CVE-2023-48054 has a severity rating of high (7.4 out of 10).
What is the affected software of CVE-2023-48054?
The affected software is localstack v2.3.2.
How can an attacker exploit CVE-2023-48054?
An attacker can exploit CVE-2023-48054 by performing a man-in-the-middle attack to eavesdrop on the communication between the host and server.
Is there a fix for CVE-2023-48054?
Yes, to fix CVE-2023-48054, update localstack to a version that includes SSL certificate validation.