12 matches found
Backstage may expose sensitive information in Scaffolder task failure events
Impact Under specific template and failure conditions, an authenticated user may be able to retrieve sensitive values from Scaffolder task events. This can expose backend-managed credentials used during task execution. Patches Patched in @backstage/plugin-scaffolder-backend version 4.1.0...
5.3CVSS5.8AI score0.0029EPSS
SaveExploits0References5Affected Software1
20