Sentry 6.0.9 Vulnerability Exposes Users to Cross-Site Scripting Attacks

CVE-2024-10276

What is CVE-2024-10276?

A vulnerability exists in Telestream Sentry version 6.0.9 that pertains to the Reports Page component. The flaw allows the manipulation of the argument 'z' within the page, leading to cross site scripting (XSS). The exploit is categorized as a remote attack vector, enabling malicious actors to execute unauthorized scripts in the context of the affected application. Given that the vulnerability has been disclosed publicly, organizations using this version of Telestream Sentry are strongly advised to implement security measures to protect against potential exploitation.

References