Threats tagged 'ghsa-c36c-cf6r-ghgj'

An inconsistency in repository filtering in the Bitbucket Server catalog event updates of the Backstage plugin allows authenticated users with push access to filtered-out repositories to trigger events that cause these repositories to be ingested into the catalog. This occurs despite configured filters meant to exclude such repositories, potentially leading to unintended trust and ingestion of repository metadata. The issue affects deployments using event-driven updates with readable filtered-out repositories. A fix is available in version 0.5.15 of the plugin.