CVE-2024-53983

The Backstage Scaffolder plugin Houses types and utilities for building scaffolder-related modules. A vulnerability is identified in Backstage Scaffolder template functionality where Server-Side Template Injection (SSTI) can be exploited to perform Git config injection. The vulnerability allows an attacker to capture privileged git tokens used by the Backstage Scaffolder plugin. With these tokens, unauthorized access to sensitive resources in git can be achieved. The impact is considered medium severity as the Backstage Threat Model recommends restricting access to adding and editing templates in the Backstage Catalog plugin. The issue has been resolved in versions `v0.4.12`, `v0.5.1` and `v0.6.1` of the `@backstage/plugin-scaffolder-node` package. Users are encouraged to upgrade to this version to mitigate the vulnerability. Users are advised to upgrade. Users unable to upgrade may ensure that templates do not change git config.

• CWE-918

• https://github.com/backstage/backstage/security/advisories/GHSA-qmc2-jpr5-7rg9
• https://github.com/backstage/backstage/tree/master/plugins/scaffolder-node

Published

Nov 29, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-53977A vulnerability has been identified in ModelSim (All version…7.8
• CVE-2024-53979ibm.ibm_zhmc is an Ansible collection for the IBM Z HMC. The…8.2
• CVE-2024-5398Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-53980RIOT is an open-source microcontroller operating system, des…7.5
• CVE-2024-53981python-multipart is a streaming multipart parser for Python.…7.5
• CVE-2024-53982ZOO-Project is a C-based WPS (Web Processing Service) implem…8.7
• CVE-2024-53984Nanopb is a small code-size Protocol Buffers implementation.…4.3
• CVE-2024-53985rails-html-sanitizer is responsible for sanitizing HTML frag…6.1
• CVE-2024-53986rails-html-sanitizer is responsible for sanitizing HTML frag…6.1
• CVE-2024-53987rails-html-sanitizer is responsible for sanitizing HTML frag…6.1
• CVE-2024-53988rails-html-sanitizer is responsible for sanitizing HTML frag…6.1
• CVE-2024-53989rails-html-sanitizer is responsible for sanitizing HTML frag…6.1