Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-26150
HistoryFeb 23, 2024 - 4:15 p.m.

Path traversal

2024-02-2316:15:00
PRIOn knowledge base
www.prio-n.com
4
path traversal
backstage
developer portals
security vulnerability
symlink injection
patched

7.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

@backstage/backend-common is a common functionality library for backends for Backstage, an open platform for building developer portals. In @backstage/backend-common prior to versions 0.21.1, 0.20.2, and 0.19.10, paths checks with the resolveSafeChildPath utility were not exhaustive enough, leading to risk of path traversal vulnerabilities if symlinks can be injected by attackers. This issue is patched in @backstage/backend-common versions 0.21.1, 0.20.2, and 0.19.10.

7.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

Related for PRION:CVE-2024-26150