All vulnerabilities

Servers and applications

CVE-2024-41656

Sentry is an error tracking and performance monitoring platform. Starting in version 10.0.0 and prior to version 24.7.1, an unsanitized payload sent by an Integration platform integration allows storing arbitrary HTML tags on the Sentry side with the subsequent rendering them on the Issues page. Self-hosted Sentry users may be impacted in case of untrustworthy Integration platform integrations…

Severity
Medium 5.4
Published
23 Jul 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
24.7.1
Sources
NVD

Affected software

SoftwareAffected versions
SentryServers and applications · cpe:a:sentry:sentry
  • From 10.0.0 before 24.7.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-41656
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-41656