CVE-2024-45816

Storage bucket Directory Traversal in @backstage/plugin-techdocs-backend

State: Published
Severity: 6.5 Medium
Published: Sep 17, 2024
Updated: Sep 18, 2024
Reserved: Sep 9, 2024

Description

Backstage is an open framework for building developer portals. When using the AWS S3 or GCS storage provider for TechDocs it is possible to access content in the entire storage bucket. This can leak contents of the bucket that are not intended to be accessible, as well as bypass permission checks in Backstage. This has been fixed in the 1.10.13 release of the `@backstage/plugin-techdocs-backend` package. All users are advised to upgrade. There are no known workarounds for this vulnerability.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	GitHub_M

Weaknesses

CWE-23 Relative Path Traversal

Affected Products

Product	Versions
backstagebackstage	< 1.10.13Affected

References

https://github.com/backstage/backstage/security/advisories/GHSA-39v3-f278-vj3g

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.