GHSA-7mfx-xg57-53c9: Path Traversal
Impact
When using the Azure Blob Storage provider, an authenticated Backstage user may be able to read restricted TechDocs content when entity-level permissions are enabled. Deployments that intentionally disable the default backend authentication policy may have broader exposure.
Patches
Patched in @backstage/plugin-techdocs-backend version 2.2.4
Workarounds
- Restrict access to the TechDocs backend to users who are permitted to view all stored documentation until an upgrade can be applied. - Keep the default backend authentication policy enabled.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
npm/@backstage/plugin-techdocs-backendto a version that resolves this vulnerability.Fixed in 2.2.4 - Upgrade
Upgrade
@backstage/plugin-techdocs-backendto a version that resolves this vulnerability.Fixed in 2.2.4 - Configuration
Keep the default backend authentication policy enabled.
TechDocs backend default backend authentication policy = enabled - Compensating control
Restrict access to the TechDocs backend to users permitted to view all stored documentation until an upgrade can be applied.
Event History
Frequently Asked Questions
Which deployments are affected?
The issue affects deployments using the Azure Blob Storage provider for TechDocs with entity-level permissions enabled. Deployments that disable the default backend authentication policy may have broader exposure.
What does an attacker need to exploit this?
An attacker needs to be an authenticated Backstage user. No user interaction is required, and the impact is unauthorized reading of restricted TechDocs content.
What version contains the fix?
Upgrade @backstage/plugin-techdocs-backend to version 2.2.4 or later.
What can be done until the upgrade is applied?
Restrict TechDocs backend access to users who are permitted to view all stored documentation. Keep the default backend authentication policy enabled.