5.3Medium
Backstage: TechDocs arbitrary file read via mkdocs snippets
backstage backstage; @backstage/plugin-techdocs-node plugin-techdocs-node
Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by techdocs arbitrary file read via mkdocs snippets. Unsafe path resolution in TechDocs source tree handling allows an auth…