Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33133
HistoryNov 30, 2021 - 3:27 a.m.

Path Traversal

2021-11-3003:27:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
path traversal
vulnerability
software
user input
template manipulation
file injection

EPSS

0.001

Percentile

32.5%

@backstage/plugin-scaffolder-backend is vulnerable to path traversal. An attacker with access to a registered scaffolder template can manipulate the template by writing files to arbitrary paths on the scaffolder-backend host instance. The vulnerability can be exploited through the user input when executing a template. This method will allow the attacker to control the content of the injected file, unless the template is also crafted in a way that gives control of the file contents.

EPSS

0.001

Percentile

32.5%

Related for VERACODE:33133