Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
CVE-2024-45816: Backstage: Leaks sensitive files from AWS or GCS storage buckets
CVE-2024-45816 · published 2 years ago
Summary
Using Backstage with AWS S3 or GCS storage can expose sensitive files from the entire storage bucket. This can happen even if you've set permissions in Backstage. To protect your data, update to the latest version of the Backstage TechDocs plugin.
What to do
- Update backstage plugin-techdocs-backend to version 1.10.13.
- Update linuxfoundation backstage to version 1.10.13 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| npm | backstage | plugin-techdocs-backend |
< 1.10.13 Fix: upgrade to 1.10.13
|
| – | linuxfoundation | backstage |
< 1.10.13 cpe:2.3:a:linuxfoundation:backstage:*:*:*:*:*:*:*:* |
Original advisory text
Backstage is an open framework for building developer portals. When using the AWS S3 or GCS storage provider for TechDocs it is possible to access content in the entire storage bucket. This can lea...
Backstage is an open framework for building developer portals. When using the AWS S3 or GCS storage provider for TechDocs it is possible to access content in the entire storage bucket. This can leak contents of the bucket that are not intended to be accessible, as well as bypass permission checks in Backstage. This has been fixed in the 1.10.13 release of the `@backstage/plugin-techdocs-backend` package. All users are advised to upgrade. There are no known workarounds for this vulnerability.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
6.5
Medium
Type
CWE-22Path Traversal
CWE-23Relative Path Traversal
Timeline
Published17 Sep 2024
Updated4 Nov 2026
First seen6 Mar 2026
Track software like this
Free during beta