UpHeron
All vulnerabilities

Servers and applications

CVE-2023-36826

Improper authorization on debug and artifact file downloads

Severity
Medium 6.5
Published
25 Jul 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
23.5.2
Also known as
GHSA-m4hc-m2v6-hfw8
Sources
NVD, Project advisories (GitHub)

Description

Sentry is an error tracking and performance monitoring platform. Starting in version 8.21.0 and prior to version 23.5.2, an authenticated user can download a debug or artifact bundle from arbitrary organizations and projects with a known bundle ID. The user does not need to be a member of the organization or have permissions on the project. A patch was issued in version 23.5.2 to ensure…

Affected software

SoftwareAffected versions
SentryServers and applications · cpe:a:sentry:sentry
  • From 8.21.0 before 23.5.2
SentryServers and applications · github:getsentry/sentry
  • From 8.21.0 before 23.5.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-36826
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-36826
  • GitHub Advisory Database https://github.com/advisories/GHSA-m4hc-m2v6-hfw8
  • github.com https://github.com/getsentry/sentry/security/advisories/GHSA-m4hc-m2v6-hfw8