2 matches found
Insertion of Sensitive Information Into Sent Data
Overview @sentry/nextjs is an Official Sentry SDK for Next.js Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the sendDefaultPii configuration option. An attacker can gain access to sensitive HTTP headers, such as authentication cookies, b...
7.2CVSS6.9AI score0.00344EPSS
SaveExploits0References2
@gem-sdk/pages (>=1.9.33, <=1.33.4) potentially affected by CVE-2023-46729 via @sentry/nextjs (>=7.46.0, <=7.57.0)
@sentry/nextjs NPM version =7.46.0, =1.9.33, =1.33.4 Source cves: CVE-2023-46729 Source advisory: OSV:GHSA-2RMR-XW8M-22Q9...
9.3CVSS7.6AI score0.00631EPSS
SaveExploits0
20