Skip to content
Threat Feed
Subscribe

Product

Plugin-Scaffolder-Backend (< 3.3.1, >= 3.4.0 < 3.4.1, >= 4.0.0 < 4.0.3, >= 4.0.4 < 4.1.0)

1 brief RSS
critical advisory

Sensitive Information Exposure in Backstage Scaffolder Plugin

An authenticated user can access internal task execution data in Backstage, potentially exposing credentials stored within Scaffolder tasks to unauthorized parties.

plugin-scaffolder-backend +2 vulnerability cloud-native backstage cve rce privilege-escalation
2t 1c