CVE-2023-6944
Medium
Description
A flaw was found in the Red Hat Developer Hub (RHDH). The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gaining access to this token and depending on permissions, an attacker could push malicious code to repositories, delete resources in Git, revoke or generate new keys, and sign code illegitimately.
SeverityMedium
CVSS5.7
Exploit probability—
Product
Redhat Red Hat Developer Hub
PublishedJan 4, 2024
First seenJan 4, 2024
Weakness typeCWE-209CWE-209
How to fix
Update
- redhat red_hat_developer_hub1.21.0 or later
- linuxfoundation backstage1.21.0 or later
- @backstage/backend-app-api0.5.9-next.1 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat red_hat_developer_hub | v < 1.21.0 | 1.21.0 |
| linuxfoundation backstage | v < 1.21.0 | 1.21.0 |
| @backstage/backend-app-apinpm | v < 0.5.9-next.1 | 0.5.9-next.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.