Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le novembre 15, 2022, 20:01:38

Titre: [Sophos]Log4Shell-like code execution hole in popular Backstage dev tool
Posté par: igor51 le novembre 15, 2022, 20:01:38
Log4Shell-like code execution hole in popular Backstage dev tool

Researchers at cloud coding security company Oxeye have written up a critical bug that they recently discovered in the popular cloud development toolkit Backstage. Their report includes an explanation of how the bug works, plus proof-of-concept (PoC) code showing how to exploit it. Backstage is what’s known as a cloud developer portal – a sort […]
Source: Log4Shell-like code execution hole in popular Backstage dev tool (https://nakedsecurity.sophos.com/2022/11/15/log4shell-like-code-execution-hole-in-popular-backstage-dev-tool/)