CVE-2026-26004
Sentry allows unauthorized access to event data across organizational boundaries
Résumé
Sentry allows unauthorized access to event data across organizational boundaries
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Sentry is a developer-first error tracking and performance monitoring tool. Versions prior to 26.1.0 have a cross-organization Insecure Direct Object Reference (IDOR) vulnerability in Sentry's GroupEventJsonView endpoint. Version 26.1.0 patches the issue.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory securitylab.github.com
- patch github.com
- patch github.com