CVE-2025-22146

creationtimestamp| type| source ---|---|--- 2025-01-15 20:16:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfslgxve3c2n 2025-01-15 20:46:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113834328305491166 2025-01-15 20:49:18+00:00| seen|...

CVE-2025-22146

Sentry is a developer-first error tracking and performance monitoring tool. A critical vulnerability was discovered in the SAML SSO implementation of Sentry. It was reported to us via our private bug bounty program. The vulnerability allows an attacker to take over any user account by using a...

CVE-2025-22146 Improper authentication on SAML SSO process allows user impersonation in sentry

Sentry is a developer-first error tracking and performance monitoring tool. A critical vulnerability was discovered in the SAML SSO implementation of Sentry. It was reported to us via our private bug bounty program. The vulnerability allows an attacker to take over any user account by using a...

CVE-2025-22146

CVE-2025-22146 affects Sentry’s SAML SSO implementation. The vulnerability allows an attacker to impersonate users and take over accounts on the same Sentry instance by leveraging a malicious SAML Identity Provider, with the victim’s email known to exploit it. The SaaS fix was deployed on 2025-01...

CVE-2025-22146 Improper authentication on SAML SSO process allows user impersonation in sentry

Sentry is a developer-first error tracking and performance monitoring tool. A critical vulnerability was discovered in the SAML SSO implementation of Sentry. It was reported to us via our private bug bounty program. The vulnerability allows an attacker to take over any user account by using a...