1 matches found
Sentry improperly authorizes deletion of user issue alert notifications
ImpactAn authenticated user may delete user issue alert notifications for arbitrary users given a known alert ID. PatchesA patch was issued to ensure authorization checks are properly scoped on requests to delete user alert notifications.Sentry SaaS users do not need to take any action. Self-Host...
7.1CVSS6AI score0.00386EPSS
SaveExploits0References8Affected Software1
20