Lucene search
+L

3 matches found

PyPA
PyPA
added 2023/07/25 7:15 p.m.12 views

PYSEC-2023-130

Sentry is an error tracking and performance monitoring platform. Starting in version 8.21.0 and prior to version 23.5.2, an authenticated user can download a debug or artifact bundle from arbitrary organizations and projects with a known bundle ID. The user does not need to be a member of the...

7.7CVSS6.8AI score0.00634EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/07/25 6:50 p.m.47 views

CVE-2023-36826 Sentry vulnerable to improper authorization on debug and artifact file downloads

Sentry is an error tracking and performance monitoring platform. Starting in version 8.21.0 and prior to version 23.5.2, an authenticated user can download a debug or artifact bundle from arbitrary organizations and projects with a known bundle ID. The user does not need to be a member of the...

7.7CVSS7.7AI score0.00634EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/07/25 12:0 a.m.11 views

PT-2023-25715 · Sentry · Sentry

Name of the Vulnerable Software and Affected Versions: Sentry versions 8.21.0 through 23.5.1 Description: An authenticated user can download a debug or artifact bundle from arbitrary organizations and projects with a known bundle ID, without needing to be a member of the organization or having...

8.3CVSS6.5AI score0.00634EPSS
SaveExploits0References10
Rows per page
Query Builder