Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2023/02/14 9:35 p.m.33 views

Cross site scripting Vulnerability in backstage Software Catalog

Impact This vulnerability allows a malicious actor with access to add or modify content in an instance of the Backstage software catalog to inject script URLs in the entities stored in the catalog. If users of the catalog then click on said URLs, that can lead to an XSS attack. Patches This...

6.8CVSS5.2AI score0.00453EPSS
SaveExploits0References4Affected Software3
OSV
OSV
added 2023/02/14 9:35 p.m.25 views

GHSA-7HV8-3FR9-J2HV Cross site scripting Vulnerability in backstage Software Catalog

Impact This vulnerability allows a malicious actor with access to add or modify content in an instance of the Backstage software catalog to inject script URLs in the entities stored in the catalog. If users of the catalog then click on said URLs, that can lead to an XSS attack. Patches This...

6.8CVSS5.8AI score0.00453EPSS
SaveExploits0References4
Rows per page
Query Builder