CVE-2023-25571

Backstage is an open platform for building developer portals. @backstage/catalog-model prior to version 1.2.0, @backstage/core-components prior to 0.12.4, and @backstage/plugin-catalog-backend prior to 1.7.2 are affected by a cross-site scripting vulnerability. This vulnerability allows a malicio...

@janus-idp/backstage-plugin-keycloak-backend (1.0.0), @janus-idp/backstage-plugin-quay (>=1.0.0, <=1.2.1) +2 more potentially affected by CVE-2023-25571 via @backstage/catalog-model (>=1.0.0, <=1.1.5)

@backstage/catalog-model NPM version =1.0.0, =1.0.0, =1.2.6, =1.2.7 Source cves: CVE-2023-25571 Source advisory: OSV:GHSA-7HV8-3FR9-J2HV...

CVE-2023-25571

Backstage is an open platform for building developer portals. "@backstage/catalog-model" prior to version 1.2.0, "@backstage/core-components" prior to 0.12.4, and "@backstage/plugin-catalog-backend" prior to 1.7.2 are affected by a cross-site scripting vulnerability. This vulnerability allows a...

backstage 跨站脚本漏洞

backstage is an application. Backstage is an open platform for building developer portals. A security vulnerability exists in backstage catalog-model prior to 1.2.0, backstage core-components prior to 0.12.4, and backstage plugin-catalog-backend prior to 1.7.2 that originates from a vulnerability...

CVE-2023-25571: Improper Neutralization of Encoded URI Schemes in a Web Page

Backstage is an open platform for building developer portals. @backstage/catalog-model prior to version 1.2.0, @backstage/core-components prior to 0.12.4, and @backstage/plugin-catalog-backend prior to 1.7.2 are affected by a cross-site scripting vulnerability. This vulnerability allows a malicio...