CVE-2021-32090

Name of the Vulnerable Software and Affected Versions: StackLift LocalStack version 0.12.6

Description: The issue allows attackers to inject arbitrary shell commands via the functionName parameter in the dashboard component. This could potentially lead to unauthorized access and execution of malicious commands.

Recommendations: For StackLift LocalStack version 0.12.6, consider restricting access to the dashboard component to minimize the risk of exploitation. Avoid using the functionName parameter in the affected dashboard component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.