CVE-2024-45815: Backstage Missing Auditor Event

Missing auditor event creation in the Backstage API endpoint. This bypasses the tracing and auditing systems, resulting in missing forensic evidence.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0TS
greprules fetch cve-2024-45815-backstage-missing-auditor-event --engine opengrep

Description

Missing auditor event creation in the Backstage API endpoint. This bypasses the tracing and auditing systems, resulting in missing forensic evidence.