PT-2024-9770 · Unknown · @Backstage/Plugin-Techdocs-Backend

Rugvip · Published 2024-09-16 · Updated 2025-01-03 · CVE-2024-46976

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions: @backstage/plugin-techdocs-backend versions prior to 1.10.13

Description: The issue allows an attacker with control of the TechDocs storage buckets to inject executable scripts in the TechDocs content. These scripts will be executed in the victim's browser when browsing documentation or navigating to an attacker-provided link. This can lead to cross-site scripting attacks.

Recommendations: For versions prior to 1.10.13, upgrade to the 1.10.13 release of the @backstage/plugin-techdocs-backend package to fix the issue. As a temporary workaround, consider restricting access to the TechDocs content to minimize the risk of exploitation.

Exploit

Fix

Protection Mechanism Failure

XSS

Weakness Enumeration

CWE-693

CWE-79

Related Identifiers

BDU:2024-11516

CVE-2024-46976

GHSA-5J94-F3MF-8685

Affected Products

@Backstage/Plugin-Techdocs-Backend

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46976.json · Exploit
• https://bdu.fstec.ru/vul/2024-11516 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-46976 · Security Note
• https://osv.dev/vulnerability/GHSA-5j94-f3mf-8685 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-46976 · Vendor Advisory
• https://github.com/backstage/backstage · Note
• https://github.com/backstage/backstage/security/advisories/GHSA-5j94-f3mf-8685 · Note
• https://backstage.io/docs/features/techdocs/configuration · Note
• https://t.me/cvedetector/5861 · Telegram Post
• https://vuldb.com/?id.277803 · Note
• https://t.me/cvenotify/106151 · Telegram Post
• https://t.me/cvenotify/95004 · Telegram Post
• https://twitter.com/CVEnew/status/1836141225465848027 · Twitter Post