CVE-2025-53099

creationtimestamp| type| source ---|---|--- 2025-07-01 15:07:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20042...

CVE-2025-53099 Sentry Missing Invalidation of Authorization Codes During OAuth Exchange and Revocation

Sentry is a developer-first error tracking and performance monitoring tool. Prior to version 25.5.0, an attacker with a malicious OAuth application registered with Sentry can take advantage of a race condition and improper handling of authorization code within Sentry to maintain persistence to a...