Skip to content
Threat Feed
Subscribe

Tag

Sentry

2 briefs RSS
high advisory

Sentry 8.2.0 Remote Code Execution via Pickle Deserialization (CVE-2021-47935)

Sentry 8.2.0 contains a remote code execution vulnerability (CVE-2021-47935) that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log entry data parameter via crafted POST requests to the admin audit log endpoint.

Sentry 8.2.0 rce pickle deserialization sentry
2r 1t 1c
critical advisory

Sentry SAML SSO Improper Authentication Vulnerability

A critical vulnerability in Sentry's SAML SSO implementation allows account takeover by exploiting improper authentication when multiple organizations are configured, affecting versions 21.12.0 to 26.2.0 and requiring a malicious SAML Identity Provider and knowledge of the victim's email address.

sentry saml sso authentication account-takeover
2r 1t 1c