CyberRota Analysis
AI-GeneratedThe vulnerability affects the Backstage framework, specifically the search backend plugins, allowing authenticated users to access search results that should be restricted by policy. This could lead to unauthorized information exposure in environments where permission filtering is enabled and an Elasticsearch or OpenSearch backend is used. Organizations utilizing Backstage with these plugins should prioritize updating to the patched versions to mitigate potential data leaks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in @backstage/plugin-search-backend-module-elasticsearch, search engine permission filtering could return documents denied by policy. An authenticated Backstage user subject to a DENY policy for search document types could receive unauthorized results in deployments with permission.enabled set to true and an Elasticsearch or OpenSearch backend. This issue is fixed in @backstage/plugin-search-backend 2.1.6 and @backstage/plugin-search-backend-module-elasticsearch 1.8.7.
Related CVEs
Other vulnerabilities affecting the same vendor(s)