CVE-2021-32662: Path traversal vulnerability in @backstage/techdocs-common
Summary
CVE-2021-32662: Path traversal. Affects @backstage/techdocs-common versions < 0.6.3. Fixed in 0.6.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The @backstage/techdocs-common package is an npm package that is part of the TechDocs documentation system. It is responsible for building and publishing documentation for Backstage, an open-source platform for building developer portals. The package provides functionality for configuring the documentation source and generating the documentation website. It is widely used by developers and organizations to create and manage their documentation.
Vulnerability Detail
The package is vulnerable to a path traversal attack. By setting a specific path for 'docs_dir' in the 'mkdocs.yml' configuration file, a malicious actor can read sensitive files from the environment where TechDocs documentation is built and published. These files can then be accessed through the TechDocs backend API. However, exploiting this vulnerability requires the attacker to have access to modify the 'mkdocs.yml' file in the documentation source code and also have access to the TechDocs backend API. The vulnerability is considered moderate in severity.
How To Fix
Minimum fixed version
0.6.3
This is the first release that contains the fix.
npm install @backstage/techdocs-common@0.6.3Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The @backstage/techdocs-common package is vulnerable to a path traversal attack that allows an attacker to read sensitive files. It is recommended to update to version 0.6.3 of the package to fix the vulnerability. If you have any further questions or need assistance with vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for @backstage/techdocs-common →
FAQ
The vulnerability allows an attacker to read sensitive files from the environment where TechDocs documentation is built and published. However, exploiting this vulnerability requires the attacker to have access to modify the 'mkdocs.yml' file and access to the TechDocs backend API.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability. Vulert uses package-lock.json to monitor and alert in real-time for open-source vulnerabilities in software.
The vulnerability is considered moderate in severity with a CVSS score of 6.5.
There is no known exploit for this vulnerability at the moment.
For more information, you can open an issue in the Backstage repository on GitHub or visit the Backstage README for the chat link.
References
Related vulnerabilities
Recent vulnerabilities recorded for @backstage/techdocs-common.
