Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:backstage:backstage_plugin_scaffolder_backend_module_sentry:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Improper Input Validation in Backstage Sentry Scaffolder Module

An authenticated internal user can exploit improper input validation in the Backstage Sentry scaffolder module to trigger SSRF and disclose sensitive integration credentials.

@backstage/plugin-scaffolder-backend-module-sentry web-vulnerability ssrf supply-chain
2t 1c