Skip to content
Threat Feed

Tag

Sentry

1 brief RSS
critical advisory

Sentry SAML SSO Improper Authentication Vulnerability

A critical vulnerability in Sentry's SAML SSO implementation allows account takeover by exploiting improper authentication when multiple organizations are configured, affecting versions 21.12.0 to 26.2.0 and requiring a malicious SAML Identity Provider and knowledge of the victim's email address.

sentry saml sso authentication account-takeover
2r 1t 1c