Sentry is an error tracking and performance monitoring platform. Starting in version 8.21.0 and prior to version 23.5.2, an authenticated user can download a debug or artifact bundle from arbitrary organizations and projects with a known bundle ID. The user does not need to be a member of the organization or have permissions on the project. A patch was issued in version 23.5.2 to ensure authorization checks are properly scoped on requests to retrieve debug or artifact bundles. Authenticated users who do not have the necessary permissions on the particular project are no longer able to download them. Sentry SaaS users do not need to take any action. Self-Hosted Sentry users should upgrade to version 23.5.2 or higher.
References
Configurations
History
21 Nov 2024, 08:10
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.7 |
| References | () https://github.com/getsentry/sentry/commit/e932b15435bf36239431eaa3790a6bcfa47046a9 - Patch | |
| References | () https://github.com/getsentry/sentry/pull/49680 - Patch | |
| References | () https://github.com/getsentry/sentry/security/advisories/GHSA-m4hc-m2v6-hfw8 - Vendor Advisory |
02 Aug 2023, 15:57
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| First Time |
Sentry
Sentry sentry |
|
| References | (MISC) https://github.com/getsentry/sentry/security/advisories/GHSA-m4hc-m2v6-hfw8 - Vendor Advisory | |
| References | (MISC) https://github.com/getsentry/sentry/commit/e932b15435bf36239431eaa3790a6bcfa47046a9 - Patch | |
| References | (MISC) https://github.com/getsentry/sentry/pull/49680 - Patch | |
| CWE | ||
| CPE | cpe:2.3:a:sentry:sentry:*:*:*:*:*:*:*:* |
25 Jul 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-25 19:15
Updated : 2024-11-21 08:10
NVD link : CVE-2023-36826
Mitre link : CVE-2023-36826
CVE.ORG link : CVE-2023-36826
JSON object : View
Products Affected
sentry
- sentry