{"id":"CVE-2025-69723","title":"A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL.","summary":"A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL.","severity":"none","published":"2026-10-22","updated":"2026-10-22","sourceUpdated":"2026-10-22T18:05:58.540Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-69723","references":[{"url":"https://cyberroute.github.io/post/2025-12-11-localstack-hack/"}],"tags":["cve.org"],"ingestedAt":"2026-10-22T22:00:50.363Z","slug":"CVE-2025-69723","body":"## Overview\n\nA reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}