CyberRota Analysis
AI-GeneratedThe @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package in Backstage prior to version 0.3.25 is vulnerable due to improper validation of repository paths, allowing authenticated users to manipulate file locations and potentially write generated content outside the designated task workspace. This could lead to unauthorized access or modification of files within writable areas of the Backstage backend process. Organizations using Backstage should prioritize upgrading to version 0.3.25 to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected template and control its repository file location may cause generated content to be written outside the task workspace, within locations writable by the Backstage backend process. This issue is fixed in version 0.3.25.
Related CVEs
Other vulnerabilities affecting the same vendor(s)