Skip to content
Threat Feed
Subscribe

Tag

Backend-Security

1 brief RSS
high advisory

Improper Repository Path Validation in Backstage Scaffolder Backend Module

An authenticated user can exploit improper path validation in the Backstage plugin-scaffolder-backend-module-confluence-to-markdown (CVE-2026-106560) to write files outside the designated task workspace.

plugin-scaffolder-backend-module-confluence-to-markdown web-vulnerability path-traversal backend-security
2t 1c