CVE-2026-106560

mediumPriorität · verfolgen · 26EPSS 0.003 · 24. PerzentilUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.31% (24th) EPSS

CVSS 6.5 · medium

Is it mine?

3 products

Prüfe deine Angriffsfläche

Who says so?

2 sources

nvd · osv

EPSS · bewertet 2026-10-27

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper repository path validation in a scaffolder backend module. An authenticated user who can execute an affected template and control its repository file location may cause generated content to be written outside the task workspace, within locations writable by the Backstage backend process. This issue is fixed in version 0.3.25.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.1

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6–7.1

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:Nprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 3.6

v3.17.1highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:Lsecondary · security-advisories@github.comAusnutzbarkeit 2.8 · Auswirkung 4.2

v3.17.1highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:Lsecondary · OSV

v3.16mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-22USCWE-22US

betroffene Produkte (3)

Betroffene Produkte und Versionsbereiche.

linuxfoundation backstage< 1.54.6nvdUScpe:2.3:a:linuxfoundation:backstage:*:*:*:*:*:*:*:*
linuxfoundation backstage/plugin-scaffolder-backend-module-confluence-to-markdown< 0.3.25nvdUScpe:2.3:a:linuxfoundation:backstage\/plugin-scaffolder-backend-module-confluence-to-markdown:*:*:*:*:*:*:*:*
npm @backstage/plugin-scaffolder-backend-module-confluence-to-markdown< 0.3.25osvUSpkg:npm/%40backstage/plugin-scaffolder-backend-module-confluence-to-markdown

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

GHSA-2cmg-v53w-8xfpBackstage: Improper repository path validation in a Scaffolder backend module2026-10-07ghsa · osvUS
### Impact An authenticated user who can execute an affected template and control its repository file location may cause generated content to be written outside the task workspace, within locations writable by the Backstage backend process. ### Patches Patched in `@backstage/plugin-scaffolder-backend-module-confluence-to-markdown` version `0.3.25` ### Workarounds - Restrict execution of templates using the affected action to trusted users. - Remove or disable the affected action until the patched package is deployed.

quellen

Welche Quellen diesen Datensatz belegen und wann.

nvd osv NVD CVE.org MITRE

veröffentlicht 2026-10-07geändert 2026-10-16

Referenzen (3) nvd

Externe Belege — Patches, Meldungen, Analysen.

https://github.com/backstage/backstage/commit/5f0000c1d0af05571e357926b3fa33a453337ff0Patch
https://github.com/backstage/backstage/releases/tag/v1.54.6PatchRelease Notes
https://github.com/backstage/backstage/security/advisories/GHSA-2cmg-v53w-8xfpMitigationPatchVendor Advisory

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan