All CVEs — page 274 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows an attacker to exchange an unexpired access token for a new access token and refresh token, effectively extending the token's lifetime. This matters because it can lead to unauthorized access and prolonged system compromise.
Node-convict library is vulnerable to prototype pollution that allows attackers to overwrite core JavaScript methods like Object.assign, leading to persistent denial of service requiring process restart. The vulnerability bypasses existing protections by targeting constructor.<key> properties instead of just constructor.prototype.* and __proto__.*.
A vulnerability in Backstage's @backstage/backend-defaults package allows restricted service credentials to bypass access restrictions during plugin delegation, potentially enabling unauthorized write operations beyond their intended read-only scope.
The flaw allows authenticated OIDC users to impersonate other catalog identities when email-based identity resolution is used with unverified emails, potentially granting unauthorized access to user permissions and data. This is a privilege escalation issue in the authentication system.
The flaw allows authenticated users to manipulate filesystem paths in Bitbucket pull-request Scaffolder actions, potentially enabling them to write files outside the expected working area and compromise backend systems. This affects Backstage's developer portal framework.