Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint
CVE-2023-46729

9.3CRITICAL

Key Information:

Vendor

Getsentry

Status
Sentry-javascript
Vendor
CVE Published:
10 November 2023

What is CVE-2023-46729?

The Sentry JavaScript SDK, specifically impacting users who enable the Next.js tunneling feature, is susceptible to an uncontrolled input vulnerability. This flaw allows an attacker to send HTTP requests to arbitrary URLs, reflecting the responses back to the user. This issue was identified in earlier SDK versions and is remediated in version 7.77.0, which addresses the unsanitized input of the tunneling endpoint. Users are encouraged to update to the latest version to mitigate potential security risks.

Affected Version(s)

sentry-javascript >= 7.26.0, < 7.77.0

References

https://github.com/getsentry/sentry-javascript/security/a...
x_refsource_CONFIRM
https://github.com/getsentry/sentry-javascript/pull/9415
x_refsource_MISC
https://github.com/getsentry/sentry-javascript/commit/ddb...
x_refsource_MISC

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.