Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/06 11:4 p.m.5 views

GHSA-P7G9-RP3G-MGFG Backstage: Catalog unprocessed read endpoints allow authenticated cross-owner data access without permission checks

Impact The unprocessed entities read endpoints in @backstage/plugin-catalog-backend-module-unprocessed do not enforce permission authorization checks. Any authenticated user can access unprocessed entity records regardless of ownership. This is an information disclosure vulnerability affecting...

4.3CVSS5.8AI score0.0017EPSS
SaveExploits0References3
Rows per page
Query Builder