CVE-2021-32661

Backstage is an open platform for building developer portals. In versions of Backstage's Techdocs Plugin @backstage/plugin-techdocs prior to 0.9.5, a malicious internal actor can potentially upload documentation content with malicious scripts by embedding the script within an object element. This...

CVE-2021-32661 TechDocs object element script injection

Backstage is an open platform for building developer portals. In versions of Backstage's Techdocs Plugin @backstage/plugin-techdocs prior to 0.9.5, a malicious internal actor can potentially upload documentation content with malicious scripts by embedding the script within an object element. This...

CVE-2021-32661

CVE-2021-32661 affects Backstage’s Techdocs Plugin, prior to version 0.9.5. A malicious internal actor could upload documentation content embedding a malicious script inside an HTML element, potentially accessing sensitive data when other users view the page. The root cause is improper handling ...