Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/10/07 6:02 p.m.•20 views

Backstage: Improper entity validation in deprecated Kubernetes services endpoint

Impact An authenticated user with Kubernetes read permissions could access Kubernetes workload data beyond their intended scope by supplying crafted entity data to the deprecated services endpoint. The exposure is limited to read-only access to Kubernetes object metadata across configured cluster...

5.3CVSS5.9AI score0.00225EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2026/10/07 6:02 p.m.•29 views

GHSA-R9PH-3637-55PX Backstage: Improper entity validation in deprecated Kubernetes services endpoint

Impact An authenticated user with Kubernetes read permissions could access Kubernetes workload data beyond their intended scope by supplying crafted entity data to the deprecated services endpoint. The exposure is limited to read-only access to Kubernetes object metadata across configured cluster...

5.3CVSS5.9AI score0.00225EPSS
SaveExploits0References5
Rows per page
Query Builder