CVE-2023-28117

CVE-2023-28117 is a medium-severity vulnerability affecting the Sentry SDK for Python, specifically its Django integration versions prior to 1.14.0. Under specific configurations, sensitive cookie values, including session cookies, could be inadvertently leaked to Sentry, potentially allowing an attacker with Sentry access to impersonate users or escalate privileges. The vulnerability has a CVSS score of 6.5 (Medium) due to its network attack vector and high confidentiality impact, though it requires specific misconfigurations to be exploitable. There is currently no evidence of active exploitation, nor are there publicly available exploit tools or significant community discussion surrounding this CVE.