CVE-2024-48743

Sentry version v.6.0.9 is affected by a Cross Site Scripting (XSS) vulnerability (CWE-79) that allows a remote attacker to execute arbitrary code via the z parameter . To minimize the risk of exploitation, it is recommended to restrict access to the vulnerable z parameter . As of the provided doc...

CVE-2024-10276

Telestream Sentry 6.0.9 contains a cross-site scripting (XSS) vulnerability in the Reports Page component, specifically via the /?page=reports endpoint where manipulating the z argument can be exploited remotely. Several connected sources confirm the vulnerability in Telestream Sentry 6.0.9, with...

CVE-2020-8887

The CVE-2020-8887 entry concerns Telestream Tektronix Medius (and Sentry) before version 10.7.5, affected by an SQL injection in the login flow. Specifically, an unauthenticated attacker can dump database contents by manipulating the page parameter in a login request to index.php. The root cause ...