CVE-2023-25571

Backstage is an open platform for building developer portals. "@backstage/catalog-model" prior to version 1.2.0, "@backstage/core-components" prior to 0.12.4, and "@backstage/plugin-catalog-backend" prior to 1.7.2 are affected by a cross-site scripting vulnerability. This vulnerability allows a...

CVE-2023-25571: Improper Neutralization of Encoded URI Schemes in a Web Page

Backstage is an open platform for building developer portals. @backstage/catalog-model prior to version 1.2.0, @backstage/core-components prior to 0.12.4, and @backstage/plugin-catalog-backend prior to 1.7.2 are affected by a cross-site scripting vulnerability. This vulnerability allows a malicio...