2 matches found
Backstage: Improper entity validation in deprecated Kubernetes services endpoint
Impact An authenticated user with Kubernetes read permissions could access Kubernetes workload data beyond their intended scope by supplying crafted entity data to the deprecated services endpoint. The exposure is limited to read-only access to Kubernetes object metadata across configured cluster...
GHSA-R9PH-3637-55PX Backstage: Improper entity validation in deprecated Kubernetes services endpoint
Impact An authenticated user with Kubernetes read permissions could access Kubernetes workload data beyond their intended scope by supplying crafted entity data to the deprecated services endpoint. The exposure is limited to read-only access to Kubernetes object metadata across configured cluster...