CVE-2021-43783

@backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates. In affected versions a malicious actor with write access to a registered scaffolder template is able to manipulate the template in a way that writes files to arbitrary paths on the scaffolder-backend host instance. This vulnerability can in some situation also be exploited through user input when executing a template, meaning you do not need write access to the templates. This method will not allow the attacker to control the contents of the injected file however, unless the template is also crafted in a specific way that gives control of the file contents. This vulnerability is fixed in version `0.15.14` of the `@backstage/plugin-scaffolder-backend`. This attack is mitigated by restricting access and requiring reviews when registering or modifying scaffolder templates.

• CWE-22
• CWE-22

• https://github.com/backstage/backstage/commit/f9352ab606367cd9efc6ff048915c70ed3013b7fPatch, Third Party Advisory
• https://github.com/backstage/backstage/security/advisories/GHSA-mg3m-f475-28hvThird Party Advisory
• https://github.com/backstage/backstage/commit/f9352ab606367cd9efc6ff048915c70ed3013b7fPatch, Third Party Advisory
• https://github.com/backstage/backstage/security/advisories/GHSA-mg3m-f475-28hvThird Party Advisory

Published

Nov 29, 2021

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43778Barcode is a GLPI plugin for printing barcodes and QR codes.…7.5
• CVE-2021-43779GLPI is an open source IT Asset Management, issue tracking s…9.9
• CVE-2021-4378The WP Quick FrontEnd Editor plugin for WordPress is vulnera…5.4
• CVE-2021-43780Redash is a package for data visualization and sharing. In v…8.8
• CVE-2021-43781Invenio-Drafts-Resources is a submission/deposit module for …4.3
• CVE-2021-43782Tuleap is a Libre and Open Source tool for end to end tracea…7.2
• CVE-2021-43784runc is a CLI tool for spawning and running containers on Li…5
• CVE-2021-43785@joeattardi/emoji-button is a Vanilla JavaScript emoji picke…6.1
• CVE-2021-43786Nodebb is an open source Node.js based forum software. In af…7.5
• CVE-2021-43787Nodebb is an open source Node.js based forum software. In af…6.1
• CVE-2021-43788Nodebb is an open source Node.js based forum software. Prior…5
• CVE-2021-43789PrestaShop is an Open Source e-commerce web application. Ver…9.8