CVE-2021-47935 - Vulnerability Analysis

Overview

Sentry 8.2.0 contains a remote code execution caused by injection of malicious pickle-serialized objects in the audit log entry data parameter, letting authenticated superusers execute arbitrary commands remotely, exploit requires superuser authentication.

Severity & Score

Impact

Authenticated superusers can execute arbitrary commands with application privileges, potentially compromising the entire system.

Mitigation

Update to the latest version of Sentry.

References

• https://sentry.io/welcome/
• https://www.exploit-db.com/exploits/50318
• https://www.vulncheck.com/advisories/sentry-remote-code-execution-via-pickle-deserialization

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner