| Package | Affected versions | Patched versions |
|---|---|---|
| backstage | < 1.54.6 | 1.54.6 |
| backstage/plugin-scaffolder-backend-module-confluence-to-markdown | < 0.3.25 | 0.3.25 |
| @backstage/plugin-scaffolder-backend-module-confluence-to-markdown | < 0.3.25 | 0.3.25 |
Insufficient input validation in the Confluence to Markdown scaffolder module could allow an attacker to influence file write operations during template execution. Exploitation requires a Backstage user to run a template that processes attacker-influenced Confluence content.
Patched in @backstage/plugin-scaffolder-backend-module-confluence-to-markdown version 0.3.25
If unable to update immediately:
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free