GHSA-39v3-f278-vj3g: @backstage/plugin-techdocs-backend storage bucket Directory Traversal vulnerability

1. GitHub Advisory Database
2. GitHub Reviewed
3. CVE-2024-45816

@backstage/plugin-techdocs-backend storage bucket Directory Traversal vulnerability

Moderate severity GitHub Reviewed Published Sep 17, 2024 in backstage/backstage

Package

npm @backstage/plugin-techdocs-backend (npm)

Affected versions

< 1.10.13

Impact

When using the AWS S3 or GCS storage provider for TechDocs it is possible to access content in the entire storage bucket. This can leak contents of the bucket that are not intended to be accessible, as well as bypass permission checks in Backstage.

Patches

This has been fixed in the 1.10.13 release of the @backstage/plugin-techdocs-backend package.

References

If you have any questions or comments about this advisory:

Open an issue in the Backstage repository
Visit our Discord, linked to in Backstage README

References

• GHSA-39v3-f278-vj3g

Published to the GitHub Advisory Database

Sep 17, 2024