Aller au contenu
en Se connecter
6.5 Moyenne

CVE-2026-115923 Backstage is an open framework for building developer portals

Description

Backstage is an open framework for building developer portals. Prior to 3.9.2 and from 4.0.0 until 4.0.2, DefaultCatalogRulesEnforcer in @backstage/plugin-catalog-backend compares the raw location.target URL against catalog.rules, while URL readers canonicalize the same URL before fetching it. An authenticated user with catalog.location.create permission can use percent-encoded path segments to make an untrusted URL match a trusted location pattern even though the canonical URL resolves outside that scope. This admits entity content from an untrusted source as trusted, while further downstream consequences depend on deployment configuration. This issue is fixed in versions 3.9.2 and 4.0.2.

Produits et versions touchés

Produit Versions touchées Corrigé en
backstage 4.0 4.0.0 → < 4.0.2 4.0.2
backstage 3.9 premières → < 3.9.2 3.9.2

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de backstage

Les 69 CVE de backstage →
CVE-2026-106495 Backstage is an open framework for building developer portals 4.3 Moyenne CVE-2026-106557 Backstage is an open framework for building developer portals 7.7 Élevée CVE-2026-106563 Backstage is an open framework for building developer portals 5.3 Moyenne CVE-2026-106562 Backstage is an open framework for building developer portals 4.3 Moyenne
Suivre cette CVE