PyPI/sentry CVE-2022-23485: unknown, EPSS 0.45%
Sentry is an error tracking and performance monitoring platform. In versions of the sentry python library prior to 22.11.0 an attacker with a known valid invite link could manipulate a cookie to allow
Action: Upgrade sentry to 22.11.0 or later.
pip install sentry==22.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 20.6.0 | 22.11.0 | - |
Fixed versions
| 22.11.0 |
Sources
CVE-2022-23485 · published · modified · JSON