Skip to content
Threat Feed
Subscribe

Product

@Backstage/Plugin-Scaffolder-Backend-Module-Sentry (>= 0.3.0, < 0.3.8)

1 brief RSS
high advisory

Improper Input Validation in Backstage Sentry Scaffolder Module

An authenticated internal user can exploit improper input validation in the Backstage Sentry scaffolder module to trigger SSRF and disclose sensitive integration credentials.

@backstage/plugin-scaffolder-backend-module-sentry web-vulnerability ssrf supply-chain
2t 1c