backstage backstage CVE-2021-32662 in Backstage and Linux Foundation Products
Published on June 3, 2021

TechDocs mkdocs.yml path traversal

product logo product logo
Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Backstage's TechDocs. In `@backstage/techdocs-common` versions prior to 0.6.3, a malicious actor could read sensitive files from the environment where TechDocs documentation is built and published by setting a particular path for `docs_dir` in `mkdocs.yml`. These files would then be available over the TechDocs backend API. This vulnerability is mitigated by the fact that an attacker would need access to modify the `mkdocs.yml` in the documentation source code, and would also need access to the TechDocs backend API. The vulnerability is patched in the `0.6.3` release of `@backstage/techdocs-common`.

Github Repository NVD

Vulnerability Analysis

CVE-2021-32662 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
NONE
Availability Impact:
NONE

Weakness Type

What is a Directory traversal Vulnerability?

The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

CVE-2021-32662 has been classified to as a Directory traversal vulnerability or weakness.


Products Associated with CVE-2021-32662

stack.watch emails you whenever new vulnerabilities are published in Backstage or Linux Foundation Backstage. Just hit a watch button to start following.

Backstage
 
Linux Foundation Backstage
 

Affected Versions

backstage Version < 0.6.3 is affected by CVE-2021-32662

Vulnerable Packages

The following package name and versions may be associated with CVE-2021-32662

Package Manager Vulnerable Package Versions Fixed In
npm @backstage/techdocs-common < 0.6.3 0.6.3

Exploit Probability

EPSS
0.48%
Percentile
64.95%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.