CVE-2023-25571

Backstage is an open platform for building developer portals. @backstage/catalog-model prior to version 1.2.0, @backstage/core-components prior to 0.12.4, and @backstage/plugin-catalog-backend prior to 1.7.2 are affected by a cross-site scripting vulnerability. This vulnerability allows a malicio...

@janus-idp/backstage-plugin-keycloak-backend (1.0.0), @janus-idp/backstage-plugin-quay (>=1.0.0, <=1.2.1) +2 more potentially affected by CVE-2023-25571 via @backstage/catalog-model (>=1.0.0, <=1.1.5)

@backstage/catalog-model NPM version =1.0.0, =1.0.0, =1.2.6, =1.2.7 Source cves: CVE-2023-25571 Source advisory: OSV:GHSA-7HV8-3FR9-J2HV...

backstage 跨站脚本漏洞

backstage is an application. Backstage is an open platform for building developer portals. A security vulnerability exists in backstage catalog-model prior to 1.2.0, backstage core-components prior to 0.12.4, and backstage plugin-catalog-backend prior to 1.7.2 that originates from a vulnerability...