Lucene search
Veracode Vulnerability DatabaseVERACODE:33139HistoryNov 30, 2021 - 3:20 p.m.
Cross Site Scripting (XSS)
2021-11-3015:20:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
cross site scripting
authorization bypass
javascript injection
software
EPSS
0.001
Percentile
29.9%
@backstage/plugin-auth-backend is vulnerable to Cross Site Scripting. The vulnerability exists in makeCreateEnv of index.ts because the code doesn’t enable authorization which allows an attacker to inject and execute arbitrary javascript.
Related
cvelist
cvelist
CVE-2021-43776 XSS vulnerability in @backstage/plugin-auth-backend
2021-11-26 18:15:10
prion
prion
Design/Logic Flaw
2021-11-26 19:15:00
github
github
Cross-Site Scripting vulnerability in @backstage/plugin-auth-backend
2021-12-01 18:29:21
cve
cve
CVE-2021-43776
2021-11-26 19:15:07
osv
osv
Cross-Site Scripting vulnerability in @backstage/plugin-auth-backend
2021-12-01 18:29:21
nvd
nvd
CVE-2021-43776
2021-11-26 19:15:07
cnvd
cnvd
backstage cross-site scripting vulnerability
2021-11-30 00:00:00