Skip to content
OpenAdvisories

Product · getsentry

symbolicator

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-51451

    SSRF in symbolicator via invalid protocol

    Symbolicator is a service used in Sentry. Starting in Symbolicator version 0.3.3 and prior to version 21.12.1, an attacker could make Symbolicator send GET HTTP requests to arbitrary URLs with internal IP addresses by using an invalid protocol. The responses …

    getsentry symbolicator
  • Medium 4.3
    CVE-2023-49094

    Symbolicator Server Side Request Forgery vulnerability

    Symbolicator is a symbolication service for native stacktraces and minidumps with symbol server support. An attacker could make Symbolicator send arbitrary GET HTTP requests to internal IP addresses by using a specially crafted HTTP endpoint. The response cou…

    getsentry symbolicator