A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL. This vulnerability impacts localstack deployments, particularly those using v4.9.2, and defenders should assess exposure to reflected XSS attacks and potential JavaScript execution in user browser contexts. The CVE record and sou [truncated]
CVE-2025-65200 is a vulnerability in localstack 4.9.2 that allows attackers to execute arbitrary code via crafted content hosted on a web-accessible URL. The vulnerability is triggered when a URL is passed to the _localstack/cloudformation/deploy endpoint, allowing the hosted content to be executed in the context of the Docker container. This issue requires defenders to assess the affected version and app [truncated]
