Information disclosure in Linuxfoundation Backstage
CVE-2023-6944
A flaw was found in the Red Hat Developer Hub (RHDH). The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gaining access to this token and depending on permissions, an attacker could push malicious code to repositories, delete resources in Git, revoke or generate new keys, and sign code illegitimately.
EPSS: 0.006 (43.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N.
Affected products
- Linuxfoundation Backstage
- Red Hat Rhdh-1.1-rhel-9 — versions 1.1-107.1724038966
- Redhat Red_hat_developer_hub
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vdb-entry, Vendor Advisory)
- secalert@redhat.com (x_refsource_REDHAT, issue-tracking, Issue Tracking, Vendor Advisory)
Frequently asked questions
- What is CVE-2023-6944?
- CVE-2023-6944 is a medium-severity vulnerability in Linuxfoundation Backstage, classified under Generation of Error Message Containing Sensitive Information. CVSS score: 5.7/10. Published 2024-01-04.
- How severe is CVE-2023-6944?
- Medium severity. CVSS v3 base score is 5.7 out of 10.
- Is CVE-2023-6944 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.