Cross-Site Request Forgery (CSRF) in salesagility/suitecrm-core
CVE-2023-3627

8.1HIGH

Key Information:

Vendor
CVE Published:
11 July 2023

What is CVE-2023-3627?

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in SuiteCRM, affecting versions prior to 8.3.1. This flaw could allow unauthorized actions to be performed on behalf of an authenticated user, potentially compromising the integrity of user accounts and enabling attackers to manipulate data without their consent. It is crucial for administrators to upgrade to the latest version and implement effective security measures to mitigate this risk.

Affected Version(s)

salesagility/suitecrm-core < 8.3.1

References

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.