CVE-2021-47935
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk57th percentile - higher than 57% of all known CVEs
Summary
Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log entry data parameter. Attackers can submit crafted POST requests to the admin audit log endpoint with base64-encoded compressed pickle payloads in the data field to achieve code execution with application privileges.
Risk Assessment
The risk for the organization is the potential takeover of the Sentry application by an authenticated superuser, which could lead to data theft, configuration modification, or further attacks on the infrastructure.
Recommendation
Immediately upgrade Sentry to version 8.2.1 or later, which includes a fix for this vulnerability. Additionally, restrict access to the admin panel to trusted users only.
Other vulnerabilities in Sentry
See all- CVE-2026-42354Critical
Sentry, an error tracking and performance monitoring tool, from version 21.12.0 to before 26.4.1 contains a critical vulnerability in the SAML SSO implementation. An attacker can take over any user account by using a malicious SAML Identity Provider and another organization on the same Sentry instance. The victim's email address must be known. The issue is patched in version 26.4.1.
- CVE-2023-39531Medium
In Sentry, an error tracking and performance monitoring platform, there is a vulnerability that allows an attacker to retrieve a valid access token for another user during the OAuth token exchange. This issue affects versions from 10.0.0 to prior to 23.7.2 due to incorrect credential validation.
- CVE-2023-39349High
Sentry is an error tracking and performance monitoring platform. In versions from 22.1.0 to prior to 23.7.2, an attacker with access to a token with limited scopes can query `/api/0/api-tokens/` for a list of all tokens created by a user, including tokens with greater scopes.
- CVE-2023-36826High
Sentry is an error tracking and performance monitoring platform. In versions 8.21.0 through 23.5.2, an authenticated user could download a debug or artifact bundle from any organization and project with a known bundle ID, without needing permissions.
Original NVD description (English source)
Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log entry data parameter. Attackers can submit crafted POST requests to the admin audit log endpoint with base64-encoded compressed pickle payloads in the data field to achieve code execution with application privileges.