Vulnerability · Published Aug 7, 2023 · Assigned by GitHub_M
CVE-2023-39349Sentry vulnerable to privilege escalation via ApiTokensEndpoint
High 8.1
In plain English
A high-severity improper access control in sentry from getsentry. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Sentry is an error tracking and performance monitoring platform. Starting in version 22.1.0 and prior to version 23.7.2, an attacker with access to a token with few or no scopes can query `/api/0/api-tokens/` for a list of all tokens created by a user, including tokens with greater scopes, and use those tokens in other requests. There is no evidence that the issue was exploited on `sentry.io`. For self-hosted users, it is advised to rotate user auth tokens. A fix is available in version 23.7.2 of `sentry` and `self-hosted`. There are no known workarounds.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | sentry | 23.7.2 | GHSA-9jcq-jf57-c62c |
| PyPI | sentry | 23.7.2 | PYSEC-2026-1912 |
Affected products (as reported)
Weakness: CWE-284, CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
References
- https://github.com/getsentry/sentry/security/advisories/GHSA-9jcq-jf57-c62c x_refsource_CONFIRM
- https://github.com/getsentry/sentry/pull/53850 x_refsource_MISC
- https://github.com/getsentry/sentry/commit/fad12c1150d1135edf9666ea72ca11bc110c1083 x_refsource_MISC
- https://github.com/getsentry/self-hosted/releases/tag/23.7.2 x_refsource_MISC
- https://github.com/getsentry/sentry/releases/tag/23.7.2 x_refsource_MISC