Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/01/21 10:36 p.m.13 views

Backstage has a Possible Symlink Path Traversal in Scaffolder Actions

Impact Multiple Scaffolder actions and archive extraction utilities were vulnerable to symlink-based path traversal attacks. An attacker with access to create and execute Scaffolder templates could exploit symlinks to: 1. Read arbitrary files via the debug:log action by creating a symlink pointin...

9.1CVSS5.8AI score0.00479EPSS
SaveExploits0References4Affected Software3
Rows per page
Query Builder