Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-9410 EUVD-2024-49922GHSA-vhp6-hrqq-rpqj

Ada.cx SSRF via Sentry Misconfiguration

Published Oct 4, 2024 · Updated Oct 4, 2024 · Assigned by tenable

Description

Ada.cx's Sentry configuration allowed for blind server-side request forgeries (SSRF) through the use of a data scraping endpoint.

Affected products

VendorProductAffectedFixed
Ada Support Ada.cx Sentry Component < Prior to October 1, 2024 Prior to October 1, 2024

References