1 matches found
CVE-2025-55285: Insertion of Sensitive Information into Log File
@backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates. Prior to version 2.1.1, duplicate logging of the input values in the fetch:template action in the Scaffolder meant that some of the secrets were not properly redacted. If $ secrets.x is not passed...
2.6CVSS5.7AI score0.00243EPSS
SaveExploits0References1
20