Skip to content

Security Bug Report - DocSupportEndpoint leaks DSN secret keys for SSO/2FA-required orgs #17871

@linear-code

Description

@linear-code

A new security finding has been identified by the Warden scanner.


Assigned team: Docs
Assignment basis: DocSupportEndpoint serves DSN info for docs pages. Contributors: Mark Story, Scott Cooper.

If you believe the issue is incorrectly assigned, please assign it to the correct team or let the security team know. Thank you!


To reduce risk of accidental information disclosure, we are intentionally not exposing full vulnerability details here.
Please see the parent ticket for the full report: getsentry/getsentry#20060

Metadata

Metadata

Assignees

No one assigned

    Labels

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions