Plugin Scaffolder Backend Module Sentry
Monthly
Improper input validation in the @backstage/plugin-scaffolder-backend-module-sentry scaffolder actions (Backstage 0.3.0 through 0.3.7) lets an authenticated internal Backstage user who is permitted to run the Sentry actions (for example sentry:project:create) supply a caller-controlled apiBaseUrl, causing the Backstage backend to send requests - including the configured Sentry Bearer token - to an attacker-chosen destination. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N, base 8.5) reflects a low-privilege, network-reachable flaw with scope change and high confidentiality impact, since the leaked integration token's usefulness depends on the token's privileges and network reachability. No public exploit code or confirmed active exploitation has been identified at time of analysis, but a vendor advisory, a fix commit, and patched releases exist.
Improper input validation in the @backstage/plugin-scaffolder-backend-module-sentry scaffolder actions (Backstage 0.3.0 through 0.3.7) lets an authenticated internal Backstage user who is permitted to run the Sentry actions (for example sentry:project:create) supply a caller-controlled apiBaseUrl, causing the Backstage backend to send requests - including the configured Sentry Bearer token - to an attacker-chosen destination. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N, base 8.5) reflects a low-privilege, network-reachable flaw with scope change and high confidentiality impact, since the leaked integration token's usefulness depends on the token's privileges and network reachability. No public exploit code or confirmed active exploitation has been identified at time of analysis, but a vendor advisory, a fix commit, and patched releases exist.