Описание
Backstage is an open framework for building developer portals. Prior to version 3.1.4, a malicious scaffolder template can bypass the log redaction mechanism to exfiltrate secrets provided run through task event logs. This issue has been patched in version 3.1.4.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.1.4 (исключая)
cpe:2.3:a:linuxfoundation:backstage\/plugin-scaffolder-backend:*:*:*:*:*:*:*:*
EPSS
Процентиль: 18%
0.00262
Низкий
2 Low
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-532
Связанные уязвимости
CVSS3: 2
redhat
5 месяцев назад
Backstage is an open framework for building developer portals. Prior to version 3.1.4, a malicious scaffolder template can bypass the log redaction mechanism to exfiltrate secrets provided run through task event logs. This issue has been patched in version 3.1.4.
CVSS3: 2
github
5 месяцев назад
@backstage/plugin-scaffolder-backend Vulnerable to Potential Session Token Exfiltration via Log Redaction Bypass
EPSS
Процентиль: 18%
0.00262
Низкий
2 Low
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-532