https://cyberroute.github.io/tags/xss/ Recent content in Xss on cyberroute Hugo -- gohugo.io en-us cyberroute@proton.me (Alessandro Bresciani) cyberroute@proton.me (Alessandro Bresciani) Thu, 11 Dec 2025 10:10:12 +0200 https://cyberroute.github.io/post/2025-12-11-localstack-hack/ Thu, 11 Dec 2025 10:10:12 +0200cyberroute@proton.me (Alessandro Bresciani) https://cyberroute.github.io/post/2025-12-11-localstack-hack/ CVE Identifiers Update (October 22, 2026): both CVEs are now published on the NVD. CVE Description CVSS 3.1 CWE CVE-2025-65200 Remote Code Execution via XSS to CloudFormation Chain 9.6 Critical (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) CWE-79 CVE-2025-69723 Reflected Cross-Site Scripting (XSS) Vulnerability 6.1 Medium (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) CWE-79 What is LocalStack and how to quickly start it? LocalStack is a popular open-source platform that emulates AWS services locally, allowing developers to build and test cloud infrastructure without touching real AWS accounts.