Lucene search
+L
SentrySentry Software Development Kit*

1 matches found

CVE
CVE
added 2023/03/22 7:37 p.m.111 views

CVE-2023-28117

CVE-2023-28117 affects the Sentry SDK for Python (Django integration) prior to 1.14.0. When sendDefaultPII is True and a custom SESSION_COOKIE_NAME or CSRF_COOKIE_NAME is used, cookies (including session cookies) can be leaked to Sentry, potentially enabling impersonation or privilege escalation ...

7.6CVSS6.5AI score0.00641EPSS
Save