Experts found critical RCE in Spotify’s Backstage

Researchers discovered a critical vulnerability impacting Spotify’s Backstage Software Catalog and Developer Platform. Researchers from the security firm Oxeye discovered a critical Remote Code Execution in Spotify’s Backstage (CVSS Score of 9.8). Backstage is Spotify’s open-source platform for building developer portals, it’s used by a several organizations, including American Airlines, Netflix, Splunk, Fidelity Investments and Epic Games. […]

The post Experts found critical RCE in Spotify’s Backstage appeared first on Security Affairs.

backstage breaking news critical hacking news information security news it information security malware pierluigi paganini rce security spotify