Vulnerabilidades em @backstage

45 resultados
Análise Vexday

O Backstage possui 4 vulnerabilidades catalogadas na base Vexday, nenhuma delas sob exploração ativa conhecida, com exposição de informações (CWE-200) como fraqueza dominante. Uma vulnerabilidade foi publicada nos últimos 90 dias, indicando um risco baixo a moderado sem presença de impacto crítico ou atividade de ataque ativa.

CVE-2026-106489MEDIUMBackstage: Improper authorization enforcement for TechDocs static contentEPSS 0.3%CVE-2026-32237MEDIUM@backstage/plugin-scaffolder-backend: Possible exposure of defaultEnvironment secrets using dry-run endpointEPSS 0.3%CVE-2026-106488HIGHBackstage: Improper authentication in the OIDC providerEPSS 0.3%CVE-2026-106493LOWBackstage: Cloud storage catalog locations may cross configured storage boundariesEPSS 0.3%CVE-2026-106491MEDIUMBackstage: Improper input validation in proxy-backendEPSS 0.3%CVE-2026-106499MEDIUMBackstage: Secret-derived values may be exposed in scaffolder task logsEPSS 0.3%CVE-2026-106458MEDIUMBackstage: Inconsistent repository filtering in Bitbucket Server catalog event updatesEPSS 0.3%CVE-2026-106487LOWBackstage: Unsupported catalog cluster authentication mode in kubernetes backendEPSS 0.3%CVE-2026-106504MEDIUMBackstage: Sensitive information exposure in scaffolder task logsEPSS 0.3%CVE-2026-106556HIGHBackstage: Configuration bypass in TechDocs mkdocs.yml sanitizationEPSS 0.3%CVE-2026-106496LOWBackstage: Inconsistent enforcement of allowed location types during catalog processingEPSS 0.2%CVE-2026-106456MEDIUMBackstage: Inconsistent credential enforcement for overlapping proxy routesEPSS 0.2%CVE-2026-106495MEDIUMBackstage: Improper access control in backend action invocationEPSS 0.2%CVE-2026-106563MEDIUMBackstage: Improper entity validation in deprecated Kubernetes services endpointEPSS 0.2%CVE-2026-106506MEDIUMBackstage: Improper input validation in scaffolder task list orderingEPSS 0.2%CVE-2026-106459HIGHBackstage: Improper input validation in Sentry scaffolder actionsEPSS 0.2%CVE-2026-106492HIGHBackstage: Improper preservation of access restrictions during service credential delegationEPSS 0.2%CVE-2026-106561MEDIUMBackstage: Sensitive information disclosure in Kubernetes resource queriesEPSS 0.2%CVE-2026-106562MEDIUMBackstage: Incorrect authorization in search engine permission filteringEPSS 0.2%CVE-2026-106497MEDIUMBackstage: Inconsistent catalog property permission evaluationEPSS 0.2%