Skip to content
Threat Feed
Subscribe

Product

Plugin-Scaffolder-Backend-Module-Confluence-to-Markdown (< 0.3.25)

1 brief RSS
high advisory

Improper Repository Path Validation in Backstage Scaffolder Backend Module

An authenticated user can exploit improper path validation in the Backstage plugin-scaffolder-backend-module-confluence-to-markdown (CVE-2026-106560) to write files outside the designated task workspace.

plugin-scaffolder-backend-module-confluence-to-markdown web-vulnerability path-traversal backend-security
2t 1c