CVE-2023-39349
Assigner: GitHub_M
Published: 2023-08-07T18:27:12.396Z
State: PUBLISHED
title: Sentry vulnerable to privilege escalation via ApiTokensEndpoint
problemTypes: descriptions: cweId: CWE-284
description: CWE-284: Improper Access Control
type: CWE
descriptions: cweId: CWE-287
description: CWE-287: Improper Authentication
type: CWE
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
version: 3.1
affected: vendor: getsentry
product: sentry
versions: version: >= 22.1.0, < 23.7.2
status: affected
descriptions: value: Sentry is an error tracking and performance monitoring platform. Starting in version 22.1.0 and prior to version 23.7.2, an attacker with access to a token with few or no scopes can query `/api/0/api-tokens/` for a list of all tokens created by a user, including tokens with greater scopes, and use those tokens in other requests. There is no evidence that the issue was exploited on `sentry.io`. For self-hosted users, it is advised to rotate user auth tokens. A fix is available in version 23.7.2 of `sentry` and `self-hosted`. There are no known workarounds.
source: advisory: GHSA-9jcq-jf57-c62c
discovery: UNKNOWN