MAL-2024-10888 Malicious code in webpack-insert-sentry-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e09bc9d55945389c2e5f8e61bc733735e8f50b50b8ebd61b6801f9d31278d74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-53253: Generation of Error Message Containing Sensitive Information

Sentry is an error tracking and performance monitoring platform. Version 24.11.0, and only version 24.11.0, is vulnerable to a scenario where a specific error message generated by the Sentry platform could include a plaintext Client ID and Client Secret for an application integration. The Client ...

Sentry 安全漏洞

Sentry is an open source bug tracking and performance monitoring platform for developers from Sentry. A security vulnerability exists in Sentry version 24.11.0. An attacker can exploit the vulnerability to obtain IDs and keys...

PT-2024-35692

Name of the Vulnerable Software and Affected Versions Sentry version 24.11.0 Description Sentry is an error tracking and performance monitoring platform. A specific error message generated by the Sentry platform could include a plaintext Client ID and Client Secret for an application integration...

The vulnerability of the software for generating real-time failure reports in Sentry arises from the need to insert confidential information into the transmitted data. This allows a intruder to gain access to confidential information.

The vulnerability of the software for generating real-time failure reports in Sentry relates to the insertion of confidential information into the transmitted data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

CVE-2024-48743

Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute arbitrary code via the z parameter...

CVE-2024-48743

Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute arbitrary code via the z parameter...

PT-2024-33197 · Sentry · Sentry

Name of the Vulnerable Software and Affected Versions: Sentry version 6.0.9 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the z parameter. Recommendations: For Sentry version 6.0.9, consider restricting access to the vulnerable parameter z to...

CVE-2024-48743

Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute arbitrary code via the z parameter...

CVE-2024-48743: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute arbitrary code via the z parameter...

CVE-2024-48743

Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute arbitrary code via the z parameter...

Sentry 安全漏洞

Sentry is an open source bug tracking and performance monitoring platform for developers from Sentry. A security vulnerability exists in Sentry version v.6.0.9. An attacker can exploit the vulnerability to execute arbitrary code via the z parameter...

CVE-2024-48743

Sentry version v.6.0.9 is affected by a Cross Site Scripting (XSS) vulnerability (CWE-79) that allows a remote attacker to execute arbitrary code via the z parameter . To minimize the risk of exploitation, it is recommended to restrict access to the vulnerable z parameter . As of the provided doc...

CVE-2024-10276

A vulnerability has been found in Telestream Sentry 6.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /?page=reports of the component Reports Page. The manipulation of the argument z leads to cross site scripting. The attack can be launche...

CVE-2024-10276

A vulnerability has been found in Telestream Sentry 6.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /?page=reports of the component Reports Page. The manipulation of the argument z leads to cross site scripting. The attack can be launche...

CVE-2024-10276

Telestream Sentry 6.0.9 contains a cross-site scripting (XSS) vulnerability in the Reports Page component, specifically via the /?page=reports endpoint where manipulating the z argument can be exploited remotely. Several connected sources confirm the vulnerability in Telestream Sentry 6.0.9, with...

CVE-2024-10276 Telestream Sentry Reports Page page cross site scripting

A vulnerability has been found in Telestream Sentry 6.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /?page=reports of the component Reports Page. The manipulation of the argument z leads to cross site scripting. The attack can be launche...

CVE-2024-10276 Telestream Sentry Reports Page page cross site scripting

A vulnerability has been found in Telestream Sentry 6.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /?page=reports of the component Reports Page. The manipulation of the argument z leads to cross site scripting. The attack can be launche...

Tektronix Sentry 跨站脚本漏洞

Tektronix Sentry is a video quality monitor from Tektronix. A cross-site scripting vulnerability exists in Tektronix Sentry version 6.0.9, which stems from the Reports Page component's /?page=report location containing a cross-site scripting vulnerability...

PT-2024-16151 · Telestream · Telestream Sentry

Name of the Vulnerable Software and Affected Versions: Telestream Sentry version 6.0.9 Description: A vulnerability has been found in the Reports Page component of the affected software, specifically in the file "/?page=reports". The manipulation of the z argument leads to cross-site scripting. T...