Lucene search
+L

22 matches found

Github Security Blog
Github Security Blog
added 2023/03/21 10:31 p.m.94 views

Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`

Impact When using the Django integration of the Sentry SDK in a specific configuration it is possible to leak sensitive cookies values, including the session cookie to Sentry. These sensitive cookies could then be used by someone with access to your Sentry issues to impersonate or escalate their...

7.6CVSS6.3AI score0.00641EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/20 12:00 a.m.20 views

PT-2023-9596

Name of the Vulnerable Software and Affected Versions Sentry SDK versions prior to 1.14.0 Description The issue is related to the leakage of sensitive cookie values, including session cookies, to Sentry when using the Django integration of the Sentry SDK in a specific configuration. This can occu...

7.6CVSS6.8AI score0.00641EPSS
SaveExploits0References21
Rows per page
Query Builder