Backstage is an open framework for building developer portals. From 0.3.0 until 0.3.8, the @backstage/plugin-scaffolder-backend-module-sentry package is affected by improper input validation in sentry scaffolder actions. An authenticated internal user who can execute the affected actions may cause the backend to contact unintended destinations and disclose Sentry integration credentials.
Subsequent impact depends on network reachability and the privileges granted to the configured token. This issue is fixed in version 0.3.8.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
Low
Partial data modification
Availability
None
No disruption
CVSS Vector v3.1
Weakness Type (CWE)
Vulnerable Products 2
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Linuxfoundation Backstage\/Plugin-Scaffolder-Backend-Module-Sentry
cpe:2.3:a:linuxfoundation:backstage\/plugin-scaffolder-backend-module-sentry:*:*:*:*:*:node.js:*:*
|
0.3.0
|
0.3.8
|
|
Linuxfoundation Backstage
cpe:2.3:a:linuxfoundation:backstage:*:*:*:*:*:*:*:*
|
1.47.0
|
1.54.8
|
References 4
https://github.com/backstage/backstage/security/advisories/GHSA-g734-fhp4-7mfp
https://github.com/backstage/backstage/security/advisories/GHSA-g734-fhp4-7mfp
https://github.com/backstage/backstage/commit/b0170fad7962fb8c3d71366b5265cf283…
https://github.com/backstage/backstage/commit/b0170fad7962fb8c3d71366b5265cf283c7bbcf7
https://github.com/backstage/backstage/releases/tag/v1.54.8
https://github.com/backstage/backstage/releases/tag/v1.54.8
https://github.com/backstage/backstage/releases/tag/v1.55.0
https://github.com/backstage/backstage/releases/tag/v1.55.0