CVE-2023-39349 Sentry vulnerable to privilege escalation via ApiTokensEndpoint

🗓️ 07 Aug 2023 18:27:12Reported by GoogleType

osv

osv🔗 osv.dev👁 18 Views

Sentry error tracking platform vulnerability in versions 22.1.0 to 23.7.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2023-39349	7 Aug 202322:18	–	circl
CNNVD	Mobileiron Sentry Access Control Error Vulnerability	7 Aug 202300:00	–	cnnvd
CVE	CVE-2023-39349	7 Aug 202318:27	–	cve
Cvelist	CVE-2023-39349 Sentry vulnerable to privilege escalation via ApiTokensEndpoint	7 Aug 202318:27	–	cvelist
EUVD	EUVD-2023-2258	3 Oct 202520:07	–	euvd
Github Security Blog	Privilege escalation via ApiTokensEndpoint	8 Aug 202320:46	–	github
NVD	CVE-2023-39349	7 Aug 202319:15	–	nvd
OSV	GHSA-9JCQ-JF57-C62C Privilege escalation via ApiTokensEndpoint	8 Aug 202320:46	–	osv
Prion	Code injection	7 Aug 202319:15	–	prion
Positive Technologies	PT-2023-26895 · Sentry · Sentry	7 Aug 202300:00	–	ptsecurity

Source	Link
github	www.github.com/getsentry/self-hosted/releases/tag/23.7.2
github	www.github.com/getsentry/sentry/releases/tag/23.7.2
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39349.json
github	www.github.com/getsentry/sentry/security/advisories/GHSA-9jcq-jf57-c62c
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-39349
github	www.github.com/getsentry/sentry/commit/fad12c1150d1135edf9666ea72ca11bc110c1083
github	www.github.com/getsentry/sentry/pull/53850

10 Apr 2026 05:00Current

7.9High risk

Vulners AI Score7.9

CVSS 3.18.1

EPSS0.00164

sentry error tracking vulnerability versions 22.1.0 23.7.2 access token api tokens user auth tokens self-hosted