Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:backstage:plugin-Scaffolder-Backend-Module-Confluence-to-Markdown:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Improper Repository Path Validation in Backstage Scaffolder Backend Module

An authenticated user can exploit improper path validation in the Backstage plugin-scaffolder-backend-module-confluence-to-markdown (CVE-2026-106560) to write files outside the designated task workspace.

plugin-scaffolder-backend-module-confluence-to-markdown web-vulnerability path-traversal backend-security
2t 1c