SSRF in Getsentry Sentry-Javascript
CVE-2023-46729
sentry-javascript provides Sentry SDKs for JavaScript. An unsanitized input of Next.js SDK tunnel endpoint allows sending HTTP requests to arbitrary URLs and reflecting the response back to the user. This issue only affects users who have Next.js SDK tunneling feature enabled. The problem has been fixed in version 7.77.0.
Vulnerability class: SSRF (Server-Side Request Forgery)
EPSS: 0.006 (46.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.3 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N.
Affected products
- Getsentry Sentry-javascript — versions >= 7.26.0, < 7.77.0
- Sentry Sentry_software_development_kit
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)
- security-advisories@github.com (Patch, x_refsource_MISC)
- security-advisories@github.com (Patch, x_refsource_MISC)
Frequently asked questions
- What is CVE-2023-46729?
- CVE-2023-46729 is a critical-severity vulnerability in Getsentry Sentry-Javascript, classified under Server-Side Request Forgery (SSRF). CVSS score: 9.3/10. Published 2023-11-10.
- How severe is CVE-2023-46729?
- Critical severity. CVSS v3 base score is 9.3 out of 10.
- Is CVE-2023-46729 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.