Description
Backstage is an open platform for building developer portals. In affected versions the auth-backend plugin allows a malicious actor to trick another user into visiting a vulnerable URL that executes an XSS attack. This attack can potentially allow the attacker to exfiltrate access tokens or other secrets from the user's browser. The default CSP does prevent this attack, but it is expected that some deployments have these policies disabled due to incompatibilities. This is vulnerability is patched in version `0.4.9` of `@backstage/plugin-auth-backend`.
Remediation
References
https://github.com/backstage/backstage/security/advisories/GHSA-w7fj-336r-vw49
https://github.com/backstage/backstage/tree/master/plugins/auth-backend
Related Vulnerabilities
CVE-2018-8108 Vulnerability in npm package bui
CVE-2021-26707 Vulnerability in npm package merge-deep
CVE-2021-4307 Vulnerability in npm package baobab
CVE-2016-3092 Vulnerability in maven package org.apache.tomcat:tomcat-util
CVE-2022-31777 Vulnerability in maven package org.apache.spark:spark-core_2.13