Описание
Missing SSL certificate validation in localstack
Missing SSL certificate validation in localstack allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.
Пакеты
Наименование
localstack
pip
Затронутые версииВерсия исправления
<= 3.0.0
Отсутствует
Связанные уязвимости
CVSS3: 7.4
nvd
около 2 лет назад
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.