UpHeron
All vulnerabilities

Servers and applications

CVE-2022-23485

Invite code reuse via cookie manipulation

Severity
Low 3.7
Published
10 Dec 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
22.11.0
Also known as
GHSA-jv85-mqxj-3f9j
Sources
NVD, Project advisories (GitHub)

Description

Sentry is an error tracking and performance monitoring platform. In versions of the sentry python library prior to 22.11.0 an attacker with a known valid invite link could manipulate a cookie to allow the same invite link to be reused on multiple accounts when joining an organization. As a result an attacker with a valid invite link can create multiple users and join an organization they may not…

Affected software

SoftwareAffected versions
SentryServers and applications · cpe:a:sentry:sentry
  • From 20.6.0 up to 22.10.0
SentryServers and applications · github:getsentry/sentry
  • From 20.6.0 before 22.11.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-23485
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-23485
  • GitHub Advisory Database https://github.com/advisories/GHSA-jv85-mqxj-3f9j
  • github.com https://github.com/getsentry/sentry/security/advisories/GHSA-jv85-mqxj-3f9j