GitHub Advisoryadvisory · npm

GHSA-2fc9-xpp8-2g9h `@backstage/backend-common` vulnerable to path traversal through symlinks

HIGH Published 2024-02-23 Modified 2024-02-23 Official page ↗
Aliases
CVE-2024-26150
Ecosystem
npm
Packages
@backstage/backend-common
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Weaknesses
CWE-22
Reviewed
2024-02-23

Affected packages

• npm @backstage/backend-common: >= 0.21.0, < 0.21.1 → fixed in 0.21.1 • npm @backstage/backend-common: < 0.19.10 → fixed in 0.19.10 • npm @backstage/backend-common: >= 0.20.0, < 0.20.2 → fixed in 0.20.2

Description

Impact Paths checks with the `resolveSafeChildPath` utility were not exhaustive enough, leading to risk of path traversal vulnerabilities if symlinks can be injected by attackers. Patches Patched in `@backstage/backend-common` version `0.21.1`. Patched in `@backstage/backend-common` version `0.20.2`. Patched in `@backstage/backend-common` version `0.19.10`. For more information If you have any questions or comments about this advisory: • Open an issue in the Backstage repository • Visit our Discord, linked to in Backstage README

Related

Alias · CVE (1)

  • CVE-2024-26150 `@backstage/backend-common` is a common functionality library for backends for Backstage, an open platform for building developer portals. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References