Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:14 a.m.•25 views

CVE-2022-23485

Sentry is an error tracking and performance monitoring platform. In versions of the sentry python library prior to 22.11.0 an attacker with a known valid invite link could manipulate a cookie to allow the same invite link to be reused on multiple accounts when joining an organization. As a result...

6.4CVSS6.1AI score0.00451EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/29 12:00 a.m.•25 views

PT-2025-23147 · Teltonika Networks · Teltonika Networks Rms

Name of the Vulnerable Software and Affected Versions: Teltonika Networks Remote Management System RMS versions prior to 5.7 Description: The issue allows for account pre-hijacking by misusing the invite functionality. If a victim has a pending invite and registers to the platform directly, they...

7.2CVSS6.5AI score0.00453EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/29 12:00 a.m.•4 views

CVE-2025-4687: Authentication Bypass Using an Alternate Path or Channel

In Teltonika Networks Remote Management System RMS, it is possible to perform account pre-hijacking by misusing the invite functionality. If a victim has a pending invite and registers to the platform directly, they are added to the attackers company without their knowledge. The victims account a...

7.2CVSS5.8AI score0.00453EPSS
SaveExploits0References1
OSV
OSV
•added 2022/12/10 1:15 a.m.•35 views

PYSEC-2022-43011

Sentry is an error tracking and performance monitoring platform. In versions of the sentry python library prior to 22.11.0 an attacker with a known valid invite link could manipulate a cookie to allow the same invite link to be reused on multiple accounts when joining an organization. As a result...

6.4CVSS6.8AI score0.00451EPSS
SaveExploits0References1
CVE
CVE
•added 2022/12/10 12:40 a.m.•137 views

CVE-2022-23485

CVE-2022-23485 affects the Sentry Python library prior to 22.11.0. An attacker with a known valid invite link could manipulate a cookie to reuse the same invite across multiple accounts when joining an organization, enabling creation of multiple users and unauthorized organization membership. The...

6.4CVSS5.2AI score0.00451EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/12/10 12:00 a.m.•11 views

PT-2022-16019 · Sentry · Sentry

Name of the Vulnerable Software and Affected Versions: Sentry versions prior to 22.11.0 Description: Sentry is an error tracking and performance monitoring platform. An attacker with a known valid invite link could manipulate a cookie to allow the same invite link to be reused on multiple account...

6.4CVSS5.2AI score0.00451EPSS
SaveExploits0References12
Rows per page
Query Builder