Arbitrary Code Execution Affecting sentry package, versions [,6.1.1)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-SENTRY-40544
- published 27 Aug 2013
- disclosed 27 Aug 2013
- credit Jeff Balogh
Overview
sentry is a realtime logging and aggregation server.
Affected versions of this package are vulnerable to Arbitrary Code Execution. There was no verification on which interface was used, allowing an attacker to use an interface of their choice, and execute arbitrary code.
References
CVSS Scores
version 3.1