1 matches found
UNIX Symbolic Link (Symlink) Following
Overview @backstage/backend-plugin-api is a Core API used by Backstage backend plugins Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following in the resolveSafeChildPath function, which relies on resolveRealPath. An attacker can access sensitive files outside the...
7CVSS5.7AI score0.00487EPSS
SaveExploits0References3
20