Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-65200

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 LocalStack 4.9.2 中发现了一个安全漏洞，允许攻击者通过精心构造的内容执行任意代码。该漏洞的触发条件是：攻击者将托管在可公开访问的 Web URL 上的恶意内容，作为 参数传递至 端点。一旦请求被处理，该托管内容将在 Docker 容器的上下文中被执行。

AI Predicted 9.8 Difficulty: Easy

Affected Version Matrix 1

VendorProduct Version RangeStatus
n/a n/a n/a affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-65200

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the the templateURL to the _localstack/cloudformation/deploy endpoint, the hosted content can get executed in the context of the docker container.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2025-65200

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-65200

请登录查看更多情报信息。

Patches & Fixes for CVE-2025-65200 (2)

Security Blog Posts for CVE-2025-65200 (1)

Vendor Pages for CVE-2025-65200 (1)

Same Patch Batch · n/a · 2026-10-22 · 6 CVEs total

CVE-2026-107079 Systrome 1.0 二维码组件 URL 参数拒绝服务漏洞
CVE-2026-78801 创维 AX1800M V1.0.3 敏感信息泄露漏洞
CVE-2026-78846 AiDot Linkind Matter 1.01.32 SSDP 缓冲区溢出漏洞
CVE-2026-51954 Webasyst Framework 4.0.3 及以下版本 OAuth 远程代码执行漏洞
CVE-2025-69723 LocalStack v4.9.2 存在反射型跨站脚本漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2025-65200

No comments yet

Leave a comment