CVE-2023-48054

—

CVSS 3.1

7.4 high

EPSS

<1%p23

Published

Nov 16, 2023 (Nov 16, 2023)

Modified

Jun 17, 2026

Description

Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.

Vendors: localstack
Products: localstack
Weakness: CWE-295
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.