CVE-2024-53983

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-53983", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2024-11-25T23:14:36.380Z", "datePublished": "2024-11-29T18:53:13.289Z", "dateUpdated": "2024-12-02T22:16:09.994Z"}, "containers": {"cna": {"title": "Server-side request forgery in Backstage Scaffolder plugin", "problemTypes": [{"descriptions": [{"cweId": "CWE-918", "lang": "en", "description": "CWE-918: Server-Side Request Forgery (SSRF)", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/backstage/backstage/security/advisories/GHSA-qmc2-jpr5-7rg9", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/backstage/backstage/security/advisories/GHSA-qmc2-jpr5-7rg9"}, {"name": "https://github.com/backstage/backstage/tree/master/plugins/scaffolder-node", "tags": ["x_refsource_MISC"], "url": "https://github.com/backstage/backstage/tree/master/plugins/scaffolder-node"}], "affected": [{"vendor": "backstage", "product": "backstage", "versions": [{"version": "< 0.4.12", "status": "affected"}, {"version": "= 0.5.0", "status": "affected"}, {"version": "= 0.6.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-11-29T18:53:13.289Z"}, "descriptions": [{"lang": "en", "value": "The Backstage Scaffolder plugin Houses types and utilities for building scaffolder-related modules. A vulnerability is identified in Backstage Scaffolder template functionality where Server-Side Template Injection (SSTI) can be exploited to perform Git config injection. The vulnerability allows an attacker to capture privileged git tokens used by the Backstage Scaffolder plugin. With these tokens, unauthorized access to sensitive resources in git can be achieved. The impact is considered medium severity as the Backstage Threat Model recommends restricting access to adding and editing templates in the Backstage Catalog plugin. The issue has been resolved in versions `v0.4.12`, `v0.5.1` and `v0.6.1` of the `@backstage/plugin-scaffolder-node` package. Users are encouraged to upgrade to this version to mitigate the vulnerability. Users are advised to upgrade. Users unable to upgrade may ensure that templates do not change git config."}], "source": {"advisory": "GHSA-qmc2-jpr5-7rg9", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-12-02T22:15:55.540623Z", "id": "CVE-2024-53983", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-02T22:16:09.994Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-53983", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-12-02T22:15:55.540623Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-02T22:16:05.527Z"}}], "cna": {"title": "Server-side request forgery in Backstage Scaffolder plugin", "source": {"advisory": "GHSA-qmc2-jpr5-7rg9", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "backstage", "product": "backstage", "versions": [{"status": "affected", "version": "< 0.4.12"}, {"status": "affected", "version": "= 0.5.0"}, {"status": "affected", "version": "= 0.6.0"}]}], "references": [{"url": "https://github.com/backstage/backstage/security/advisories/GHSA-qmc2-jpr5-7rg9", "name": "https://github.com/backstage/backstage/security/advisories/GHSA-qmc2-jpr5-7rg9", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/backstage/backstage/tree/master/plugins/scaffolder-node", "name": "https://github.com/backstage/backstage/tree/master/plugins/scaffolder-node", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "The Backstage Scaffolder plugin Houses types and utilities for building scaffolder-related modules. A vulnerability is identified in Backstage Scaffolder template functionality where Server-Side Template Injection (SSTI) can be exploited to perform Git config injection. The vulnerability allows an attacker to capture privileged git tokens used by the Backstage Scaffolder plugin. With these tokens, unauthorized access to sensitive resources in git can be achieved. The impact is considered medium severity as the Backstage Threat Model recommends restricting access to adding and editing templates in the Backstage Catalog plugin. The issue has been resolved in versions `v0.4.12`, `v0.5.1` and `v0.6.1` of the `@backstage/plugin-scaffolder-node` package. Users are encouraged to upgrade to this version to mitigate the vulnerability. Users are advised to upgrade. Users unable to upgrade may ensure that templates do not change git config."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-918", "description": "CWE-918: Server-Side Request Forgery (SSRF)"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-11-29T18:53:13.289Z"}}}, "cveMetadata": {"cveId": "CVE-2024-53983", "state": "PUBLISHED", "dateUpdated": "2024-12-02T22:16:09.994Z", "dateReserved": "2024-11-25T23:14:36.380Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2024-11-29T18:53:13.289Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"product": "backstage", "vendor": "backstage", "versions": [{"status": "affected", "version": "< 0.4.12"}, {"status": "affected", "version": "= 0.5.0"}, {"status": "affected", "version": "= 0.6.0"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Backstage Scaffolder plugin Houses types and utilities for building scaffolder-related modules. A vulnerability is identified in Backstage Scaffolder template functionality where Server-Side Template Injection (SSTI) can be exploited to perform Git config injection. The vulnerability allows an attacker to capture privileged git tokens used by the Backstage Scaffolder plugin. With these tokens, unauthorized access to sensitive resources in git can be achieved. The impact is considered medium severity as the Backstage Threat Model recommends restricting access to adding and editing templates in the Backstage Catalog plugin. The issue has been resolved in versions `v0.4.12`, `v0.5.1` and `v0.6.1` of the `@backstage/plugin-scaffolder-node` package. Users are encouraged to upgrade to this version to mitigate the vulnerability. Users are advised to upgrade. Users unable to upgrade may ensure that templates do not change git config."}, {"lang": "es", "value": "El complemento Backstage Scaffolder contiene tipos y utilidades para crear m\u00f3dulos relacionados con el scaffolder. Se ha identificado una vulnerabilidad en la funcionalidad de plantilla de Backstage Scaffolder, en la que se puede explotar Server-Side Template Injection (SSTI) para realizar una inyecci\u00f3n de configuraci\u00f3n de Git. La vulnerabilidad permite a un atacante capturar tokens de Git privilegiados utilizados por el complemento Backstage Scaffolder. Con estos tokens, se puede lograr acceso no autorizado a recursos confidenciales en Git. El impacto se considera de gravedad media, ya que el modelo de amenazas de Backstage recomienda restringir el acceso para agregar y editar plantillas en el complemento Backstage Catalog. El problema se ha resuelto en las versiones `v0.4.12`, `v0.5.1` y `v0.6.1` del paquete `@backstage/plugin-scaffolder-node`. Se recomienda a los usuarios que actualicen a esta versi\u00f3n para mitigar la vulnerabilidad. Se recomienda a los usuarios que actualicen. Los usuarios que no puedan actualizar pueden asegurarse de que las plantillas no cambien la configuraci\u00f3n de Git."}], "id": "CVE-2024-53983", "lastModified": "2026-06-17T08:09:36.860", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.0, "impactScore": 4.0, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-53983", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-12-02T22:15:55.540623Z", "version": "2.0.3"}}]}, "published": "2024-11-29T19:15:10.137", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/backstage/backstage/security/advisories/GHSA-qmc2-jpr5-7rg9"}, {"source": "security-advisories@github.com", "url": "https://github.com/backstage/backstage/tree/master/plugins/scaffolder-node"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{}