CVE-2024-53253
2 advisories.
PyPI/sentry CVE-2024-53253: medium 5.3
Sentry improper error handling leaks Application Integration Client Secret
Action: Upgrade sentry to 24.11.1 or later.
pip install sentry==24.11.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 24.11.0 | 24.11.1 | - |
Fixed versions
| 24.11.1 |
Sources
- osv: GHSA-v5h2-q2w4-gpcx
- https://github.com/getsentry/sentry/security/advisories/GHSA-v5h2-q2w4-gpcx
- https://nvd.nist.gov/vuln/detail/CVE-2024-53253
- https://github.com/getsentry/sentry/pull/79377
- https://github.com/getsentry/sentry/pull/81038
- https://github.com/getsentry/sentry
- https://github.com/pypa/advisory-database/tree/main/vulns/sentry/PYSEC-2024-310.yaml
CVE-2024-53253 · published · modified · JSON
PyPI/sentry CVE-2024-53253: medium 5.3
Sentry is an error tracking and performance monitoring platform. Version 24.11.0, and only version 24.11.0, is vulnerable to a scenario where a specific error message generated by the Sentry platform
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 24.11.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2024-310
- https://github.com/getsentry/sentry/security/advisories/GHSA-v5h2-q2w4-gpcx
- https://github.com/getsentry/sentry/pull/79377
- https://github.com/getsentry/sentry/pull/81038
CVE-2024-53253 · published · modified · JSON