Permissive Cross-domain Policy with Untrusted Domains Affecting sentry package, versions [23.6.0,23.6.2)
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-SENTRY-5759281
- published 7 Jul 2023
- disclosed 7 Jul 2023
- credit andr0idp4r4n0id
Introduced: 7 Jul 2023
CVE-2023-36829 Open this link in a new tabHow to fix?
Upgrade sentry to version 23.6.2 or higher.
Overview
Affected versions of this package are vulnerable to Permissive Cross-domain Policy with Untrusted Domains due to incorrectly returning the access-control-allow-credentials: true HTTP header if the Origin request header ends with the system.base-hostname option of Sentry installation.
Note:
This only affects installations that have system.base-hostname option explicitly set, as it is empty by default. Impact is limited since recent versions of major browsers have cross-site cookie blocking enabled by default. However, this flaw could allow other multi-step attacks.