Anmelden API-Schlüssel holen

@backstage plugin-catalog-backend-module-unprocessed Schwachstellen (CVE)

Für @backstage plugin-catalog-backend-module-unprocessed veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

1 Ergebnisse

4.3Mittel

CVE-2026-44374 vor 5 Monaten

Backstage: Catalog unprocessed read endpoints allow authenticated cross-owner data access without permission checks

@backstage plugin-catalog-backend-module-unprocessed; @backstage plugin-catalog-unprocessed-entities; @backstage plugin-catalog-unprocessed-entities-common

Backstage is an open framework for building developer portals. Prior to 0.6.11, the unprocessed entities read endpoints in @backstage/plugin-catalog-backend-module-unprocessed do not enforce permission authorization checks. Any authenticated user can access u…