Critical Sentry Vulnerability Allowed Account Takeovers

By utilizing a malicious SAML Identity Provider and targeting an organization residing on the same Sentry instance, an attacker could have taken over any user account within that organization, provided they knew the victim’s email address.