CVE-2026-29185

lowPriorität · verfolgen · 0EPSS 0.004 · 31. PerzentilEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.37% (31st) EPSS

CVSS 2.7 · low

Is it mine?

3 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · nvd · osv

EPSS · bewertet 2026-10-27

Backstage is an open framework for building developer portals. Prior to version 1.20.1, a vulnerability in the SCM URL parsing used by Backstage integrations allowed path traversal sequences in encoded form to be included in file paths. When these URLs were processed by integration functions that construct API URLs, the traversal segments could redirect requests to unintended SCM provider API endpoints using the configured server-side integration credentials. This issue has been patched in version 1.20.1.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

2.7

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.12.7lowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:Nsecondary · ENISA EU

v3.12.7lowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:Nsecondary · security-advisories@github.comAusnutzbarkeit 1.2 · Auswirkung 1.4

v3.12.7lowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:Nsecondary · OSV

v3.12.5lowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-22USCWE-22US

betroffene Produkte (3)

Betroffene Produkte und Versionsbereiche.

backstage backstage≤ < 1.20.1enisa_euvdEU
linuxfoundation backstage/integration< 1.20.1nvdUScpe:2.3:a:linuxfoundation:backstage\/integration:*:*:*:*:*:*:*:*
npm @backstage/integration< 1.20.1osvUSpkg:npm/%40backstage/integration

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

GHSA-95v5-prp4-5gv5Backstage vulnerable to potential reading of SCM URLs using built in token2026-03-05ghsa · osvUS
### Impact A vulnerability in the SCM URL parsing used by Backstage integrations allowed path traversal sequences in encoded form to be included in file paths. When these URLs were processed by integration functions that construct API URLs, the traversal segments could redirect requests to unintended SCM provider API endpoints using the configured server-side integration credentials. This affects instances that use any of the SCM integrations (GitHub, Bitbucket Server, Bitbucket Cloud) with the scaffolder or other features that accept user-provided SCM URLs. ### Patches This is patched in `@backstage/integration` version 1.20.1. ### Workarounds There is no workaround for this vulnerability. Users should upgrade to the patched version. ### References - Backstage SCM integration documentation: https://backstage.io/docs/integrations/

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd nvd osv NVD CVE.org MITRE

veröffentlicht 2026-03-07geändert 2026-06-17

Referenzen (4)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan