CVE-2024-45816: Storage bucket Directory Traversal in @backstage/plugin-techdocs-backend
Impact
When using the AWS S3 or GCS storage provider for TechDocs it is possible to access content in the entire storage bucket. This can leak contents of the bucket that are not intended to be accessible, as well as bypass permission checks in Backstage.
Patches
This has been fixed in the 1.10.13 release of the @backstage/plugin-techdocs-backend package.
References
If you have any questions or comments about this advisory:
Open an issue in the Backstage repository Visit our Discord, linked to in Backstage README
Other sources
Backstage is an open framework for building developer portals. When using the AWS S3 or GCS storage provider for TechDocs it is possible to access content in the entire storage bucket. This can leak contents of the bucket that are not intended to be accessible, as well as bypass permission checks in Backstage. This has been fixed in the 1.10.13 release of the @backstage/plugin-techdocs-backend package. All users are advised to upgrade. There are no known workarounds for this vulnerability.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45816?
CVE-2024-45816 has been classified as a high-severity vulnerability due to the potential for unauthorized access to sensitive content in cloud storage buckets.
How do I fix CVE-2024-45816?
To fix CVE-2024-45816, upgrade the version of @backstage/plugin-techdocs-backend to 1.10.13 or later.
What systems are affected by CVE-2024-45816?
CVE-2024-45816 affects versions of the Backstage framework prior to 1.10.13, specifically those using AWS S3 or Google Cloud Storage providers.
What are the risks associated with CVE-2024-45816?
The risks of CVE-2024-45816 include leaking unintended content from storage buckets and bypassing permission checks within Backstage.
Is there a workaround for CVE-2024-45816?
There is no documented workaround for CVE-2024-45816; upgrading to the patched version is recommended to mitigate the vulnerability.