CVE-2022-23485
2 advisories.
PyPI/sentry CVE-2022-23485: medium 6.4, EPSS 0.45%
Sentry vulnerable to invite code reuse via cookie manipulation
Action: Upgrade sentry to 22.11.0 or later.
pip install sentry==22.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 20.6.0 | 22.11.0 | - |
Fixed versions
| 22.11.0 |
Sources
- osv: GHSA-jv85-mqxj-3f9j
- https://github.com/getsentry/sentry/security/advisories/GHSA-jv85-mqxj-3f9j
- https://nvd.nist.gov/vuln/detail/CVE-2022-23485
- https://github.com/getsentry/sentry/commit/565f971da955d57c754a47f5802fe9f9f7c66b39
- https://github.com/getsentry/sentry
- https://github.com/pypa/advisory-database/tree/main/vulns/sentry/PYSEC-2022-43011.yaml
CVE-2022-23485 · published · modified · JSON
PyPI/sentry CVE-2022-23485: unknown, EPSS 0.45%
Sentry is an error tracking and performance monitoring platform. In versions of the sentry python library prior to 22.11.0 an attacker with a known valid invite link could manipulate a cookie to allow
Action: Upgrade sentry to 22.11.0 or later.
pip install sentry==22.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 20.6.0 | 22.11.0 | - |
Fixed versions
| 22.11.0 |
Sources
CVE-2022-23485 · published · modified · JSON