CVE-2023-48054

Name of the Vulnerable Software and Affected Versions localstack version 2.3.2

Description The issue is related to missing SSL certificate validation, which allows attackers to intercept communications between the host and server through a man-in-the-middle attack. This enables attackers to eavesdrop on the communication.

Recommendations For localstack version 2.3.2, update to a version that includes SSL certificate validation to prevent man-in-the-middle attacks. As a temporary workaround, consider disabling communication between the host and server until a patch is available. Restrict access to sensitive data to minimize the risk of exploitation.