Logo
Retour à la veille

CVE-2026-106498

Publié : 6 octobre 2026
Modifié : 7 octobre 2026
Lien officiel NVD
Score CVSS
7.7
HIGH

Description détaillée

Backstage is an open framework for building developer portals. Prior to 3.5.1, 3.6.2, 3.7.2, 3.8.2 and 3.9.1, the @backstage/plugin-catalog-backend package is affected by improper url validation in catalog entity placeholder resolution. An authenticated Backstage user could craft a catalog entity with placeholder directives that reference resources outside the entity's source repository. Under certain configurations, this could allow access to data not intended to be available to the user. This issue is fixed in versions 3.5.1, 3.6.2, 3.7.2, 3.8.2 and 3.9.1.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Références et Patchs

https://github.com/backstage/backstage/commit/0b0f6fc89b4eb4872c76a498abbe1dc65998bb6ehttps://github.com/backstage/backstage/commit/286bfc1f9cc3608a073b41016be302785be385d1https://github.com/backstage/backstage/commit/61a10f19926aeda7f4a32de48d733e6710584634https://github.com/backstage/backstage/commit/99729e925fd2bd40ba210022351a0ee6318e6197https://github.com/backstage/backstage/commit/e786ac309ed2d775daf2309393c015c43902d6f6https://github.com/backstage/backstage/releases/tag/v1.49.6https://github.com/backstage/backstage/releases/tag/v1.50.5https://github.com/backstage/backstage/releases/tag/v1.51.3https://github.com/backstage/backstage/releases/tag/v1.53.2https://github.com/backstage/backstage/releases/tag/v1.54.6https://github.com/backstage/backstage/security/advisories/GHSA-qgvj-qcf8-xq73

Dernières Vulnérabilités

CVE-2026-87681

An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks. This allows authenticated users with read-only management privileges to bypass access controls and execute restricted administrative operations.

VOIR DÉTAILS

CVE-2026-87680

A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters.

VOIR DÉTAILS

CVE-2026-87679

When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploit this vulnerability via crafted REST API requests containing an excessive number of list delimiters, causing heap corruption that can result in service crash or arbitrary code execution.

VOIR DÉTAILS