UpHeron
All vulnerabilities

Servers and applications

CVE-2024-53253

Improper error handling leaks Application Integration Client Secret

Severity
Medium 5.3
Published
22 Nov 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Also known as
GHSA-v5h2-q2w4-gpcx
Sources
NVD, Project advisories (GitHub)

Description

Sentry is an error tracking and performance monitoring platform. Version 24.11.0, and only version 24.11.0, is vulnerable to a scenario where a specific error message generated by the Sentry platform could include a plaintext Client ID and Client Secret for an application integration. The Client ID and Client Secret would not be displayed in the UI, but would be returned in the underlying HTTP…

Affected software

SoftwareAffected versions
SentryServers and applications · cpe:a:sentry:sentry
  • Version 24.11.0
SentryServers and applications · github:getsentry/sentry
  • Version 24.11.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-53253
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-53253
  • GitHub Advisory Database https://github.com/advisories/GHSA-v5h2-q2w4-gpcx
  • github.com https://github.com/getsentry/sentry/security/advisories/GHSA-v5h2-q2w4-gpcx