Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-v3kt-ww7a-8fap
Vulnerability ID VCID-v3kt-ww7a-8fap
Aliases CVE-2024-32474
GHSA-6cjm-4pxw-7xp9
Summary Sentry is an error tracking and performance monitoring platform. Prior to 24.4.1, when authenticating as a superuser to Sentry with a username and password, the password is leaked as cleartext in logs under the _event_: `auth-index.validate_superuser`. An attacker with access to the log data could use these leaked credentials to login to the Sentry system as superuser. Self-hosted users on affected versions should upgrade to 24.4.1 or later. Users can configure the logging level to exclude logs of the `INFO` level and only generate logs for levels at `WARNING` or more.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-117 Improper Output Neutralization for Logs
CWE-312 Cleartext Storage of Sensitive Information
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00733 https://api.first.org/data/v1/epss?cve=CVE-2024-32474
epss 0.00733 https://api.first.org/data/v1/epss?cve=CVE-2024-32474
epss 0.00733 https://api.first.org/data/v1/epss?cve=CVE-2024-32474
epss 0.00733 https://api.first.org/data/v1/epss?cve=CVE-2024-32474
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-6cjm-4pxw-7xp9
cvssv3.1 7.3 https://github.com/getsentry/sentry
generic_textual HIGH https://github.com/getsentry/sentry
cvssv3.1 7.3 https://github.com/getsentry/sentry/commit/d5b34568d9f1c41362ccb62141532a0a2169512f
generic_textual HIGH https://github.com/getsentry/sentry/commit/d5b34568d9f1c41362ccb62141532a0a2169512f
ssvc Track https://github.com/getsentry/sentry/commit/d5b34568d9f1c41362ccb62141532a0a2169512f
cvssv3.1 7.3 https://github.com/getsentry/sentry/pull/66393
generic_textual HIGH https://github.com/getsentry/sentry/pull/66393
ssvc Track https://github.com/getsentry/sentry/pull/66393
cvssv3.1 7.3 https://github.com/getsentry/sentry/pull/69148
generic_textual HIGH https://github.com/getsentry/sentry/pull/69148
ssvc Track https://github.com/getsentry/sentry/pull/69148
cvssv3.1 7.3 https://github.com/getsentry/sentry/security/advisories/GHSA-6cjm-4pxw-7xp9
cvssv3.1_qr HIGH https://github.com/getsentry/sentry/security/advisories/GHSA-6cjm-4pxw-7xp9
generic_textual HIGH https://github.com/getsentry/sentry/security/advisories/GHSA-6cjm-4pxw-7xp9
ssvc Track https://github.com/getsentry/sentry/security/advisories/GHSA-6cjm-4pxw-7xp9
cvssv3.1 7.3 https://nvd.nist.gov/vuln/detail/CVE-2024-32474
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2024-32474
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2024-32474
https://github.com/getsentry/sentry
66393 https://github.com/getsentry/sentry/pull/66393
69148 https://github.com/getsentry/sentry/pull/69148
CVE-2024-32474 https://nvd.nist.gov/vuln/detail/CVE-2024-32474
d5b34568d9f1c41362ccb62141532a0a2169512f https://github.com/getsentry/sentry/commit/d5b34568d9f1c41362ccb62141532a0a2169512f
GHSA-6cjm-4pxw-7xp9 https://github.com/advisories/GHSA-6cjm-4pxw-7xp9
GHSA-6cjm-4pxw-7xp9 https://github.com/getsentry/sentry/security/advisories/GHSA-6cjm-4pxw-7xp9
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N Found at https://github.com/getsentry/sentry
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N Found at https://github.com/getsentry/sentry/commit/d5b34568d9f1c41362ccb62141532a0a2169512f
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-23T14:22:52Z/ Found at https://github.com/getsentry/sentry/commit/d5b34568d9f1c41362ccb62141532a0a2169512f
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N Found at https://github.com/getsentry/sentry/pull/66393
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-23T14:22:52Z/ Found at https://github.com/getsentry/sentry/pull/66393
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N Found at https://github.com/getsentry/sentry/pull/69148
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-23T14:22:52Z/ Found at https://github.com/getsentry/sentry/pull/69148
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N Found at https://github.com/getsentry/sentry/security/advisories/GHSA-6cjm-4pxw-7xp9
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-04-23T14:22:52Z/ Found at https://github.com/getsentry/sentry/security/advisories/GHSA-6cjm-4pxw-7xp9
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2024-32474
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.73187
EPSS Score 0.00733
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-10T18:41:49.110596+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2024/32xxx/CVE-2024-32474.json 38.6.0