PT-2024-16151 · Telestream · Telestream Sentry

Name of the Vulnerable Software and Affected Versions: Telestream Sentry version 6.0.9 Description: A vulnerability has been found in the Reports Page component of the affected software, specifically in the file "/?page=reports". The manipulation of the z argument leads to cross-site scripting. T...

ROS-20241021-05

Vulnerability in Sentry SDK real-time crash reporting software is related to a leak of sensitive cookie values. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to sensitive information...

Prototype Pollution

@sentry/browser is vulnerable to Prototype Pollution. The vulnerability is due to inadequate checks on user input or unsafe handling of data within an application when data is not properly validated or sanitized. It allows attackers to manipulate the prototype of objects, leading to potential...

CVE-2024-9410

Ada.cx's Sentry configuration allowed for blind server-side request forgeries SSRF through the use of a data scraping endpoint...

CVE-2024-9410 Ada.cx SSRF via Sentry Misconfiguration

Ada.cx's Sentry configuration allowed for blind server-side request forgeries SSRF through the use of a data scraping endpoint...

CVE-2024-9410 Ada.cx SSRF via Sentry Misconfiguration

Ada.cx's Sentry configuration allowed for blind server-side request forgeries SSRF through the use of a data scraping endpoint...

PT-2024-39615 · Ada.Cx · Ada.Cx

Name of the Vulnerable Software and Affected Versions: Ada.cx affected versions not specified Description: The issue concerns a blind server-side request forgery SSRF vulnerability in Ada.cx's Sentry configuration. This vulnerability is exploited through a data scraping endpoint, allowing for SSR...

@gambalabs/sentry-nuxt (>=8.31.1 <=8.32.0), @globalbrain/sefirot (=3.40.0) +26 more potentially affected by unknown CVE via @sentry/browser (>=8.0.0-alpha.2 <=8.32.0)

@sentry/browser NPM version =8.0.0-alpha.2, =8.31.1, =8.9.0, =1.0.386-leo-ron-885-experimental.35, =0.0.1, =0.1.0, =8.0.0, =8.0.0-alpha.2, =8.0.0, =1.0.0, =5.0.0, =8.0.0, =8.0.0, =8.0.0, =8.32.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-593M-55HH-J8GV...

-temp-electron-manager-somiibo (=0.0.200), 360sentry (>=1.0.0 <=1.0.4) +1709 more potentially affected by unknown CVE via @sentry/browser (>=0.1.0 <=7.119.0)

@sentry/browser NPM version =0.1.0, =1.0.0, =0.0.4, =0.65.0, =0.17.0, =0.53.0, =0.53.0, =0.16.0, =0.49.0, =0.40.0, =0.53.0, =0.16.0, =0.16.0, =0.53.0, =0.79.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-593M-55HH-J8GV...

GHSA-593M-55HH-J8GV Sentry SDK Prototype Pollution gadget in JavaScript SDKs

Impact In case a Prototype Pollution vulnerability is present in a user's application or bundled libraries, the Sentry SDK could potentially serve as a gadget to exploit that vulnerability. The exploitability depends on the specific details of the underlying Prototype Pollution issue. !NOTE This...

Authorization Bypass

Sentry is vulnerable to Authorization Bypass. The vulnerability is due to improper scoping of authorization checks on requests to mute alert rules, which allows authenticated users to mute alerts without being members of the organization or having the required permissions on the project...

CVE-2024-45606

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user can mute alert rules from arbitrary organizations and projects with a know rule ID. The user does not need to be a member of the organization or have permissions on the project. In our review, we...

CVE-2024-45605

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary users given a know alert ID. A patch was issued to ensure authorization checks are properly scoped on requests to delete user alert...

CVE-2024-45605 Improper authorization on deletion of user issue alert notifications in sentry

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary users given a know alert ID. A patch was issued to ensure authorization checks are properly scoped on requests to delete user alert...

CVE-2024-45605 Improper authorization on deletion of user issue alert notifications in sentry

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary users given a know alert ID. A patch was issued to ensure authorization checks are properly scoped on requests to delete user alert...

CVE-2024-45605

Sentry vulnerability CVE-2024-45605: Improper authorization allows an authenticated user to delete user issue alert notifications for arbitrary users when they know an alert ID. The issue is mitigated by a patch that scopes authorization checks on delete requests; affected deployments need to upg...

CVE-2024-45605 Improper authorization on deletion of user issue alert notifications in sentry

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary users given a know alert ID. A patch was issued to ensure authorization checks are properly scoped on requests to delete user alert...

CVE-2024-45606

CVE-2024-45606 affects Sentry (self-hosted and SaaS). An authenticated user could mute alert rules across arbitrary organizations and projects using a known rule ID without membership or project permissions due to improper authorization checks. A fix was issued to scope authorization correctly; a...

CVE-2024-45606 Improper authorization on muting of alert rules in sentry

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user can mute alert rules from arbitrary organizations and projects with a know rule ID. The user does not need to be a member of the organization or have permissions on the project. In our review, we...

CVE-2024-45606 Improper authorization on muting of alert rules in sentry

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user can mute alert rules from arbitrary organizations and projects with a know rule ID. The user does not need to be a member of the organization or have permissions on the project. In our review, we...