CVE-2023-39349

creationtimestamp| type| source ---|---|--- 2023-08-07 22:18:38+00:00| seen| https://t.me/cibsecurity/67907...

CVE-2023-39349

Sentry vulnerability CVE-2023-39349 affects self-hosted Sentry and the hosted service prior to 23.7.2. A attacker with a token that has few or no scopes can query the /api/0/api-tokens/ endpoint to enumerate all tokens created by a user, including tokens with greater scopes, and reuse them in oth...