CVE-2021-41151

🗓️ 18 Oct 2021 20:30:10Reported by GitHub_MType

Backstage platform vulnerability allows read access to sensitive files via custom Scaffolder template

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-41151	19 Oct 202100:32	–	circl
CNNVD	backstage 路径遍历漏洞	18 Oct 202100:00	–	cnnvd
Cvelist	CVE-2021-41151 Path Traversal in @backstage/plugin-scaffolder-backend	18 Oct 202120:30	–	cvelist
EUVD	EUVD-2021-2243	7 Oct 202500:30	–	euvd
Github Security Blog	Path Traversal in @backstage/plugin-scaffolder-backend	19 Oct 202115:28	–	github
NVD	CVE-2021-41151	18 Oct 202121:15	–	nvd
OSV	GHSA-PVV8-8FX9-H673 Path Traversal in @backstage/plugin-scaffolder-backend	19 Oct 202115:28	–	osv
Prion	Design/Logic Flaw	18 Oct 202121:15	–	prion
RedhatCVE	CVE-2021-41151	9 Jan 202609:21	–	redhatcve

NVD

Vulners

Node

linuxfoundation backstageRange0.9.4–0.15.9

[
  {
    "product": "backstage",
    "vendor": "backstage",
    "versions": [
      {
        "status": "affected",
        "version": ">=0.9.4, < 0.15.9"
      }
    ]
  }
]

Source	Link
github	www.github.com/backstage/backstage/security/advisories/GHSA-pvv8-8fx9-h673
github	www.github.com/backstage/backstage/commit/6968962c920508eae19a4c1c200fa2c8980a4006

21 Nov 2024 06:25Current

5Medium risk

Vulners AI Score5

CVSS 24

CVSS 3.14.9 - 6.8

EPSS0.00626

CWE-22