Sendinblue CSRF vulnerability affects Newsletter, SMTP, Email marketing and Subscribe forms

CVE-2024-43287
8.8HIGH

Key Information

Vendor
Brevo
Status
Newsletter, Smtp, Email Marketing And Subscribe Forms By Sendinblue
Vendor
CVE Published:
26 August 2024

Summary

Cross-Site Request Forgery (CSRF) vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue.This issue affects Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue: from n/a through 3.1.82.

Affected Version(s)

Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.82

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Risk change from: null to: 4.3 - (MEDIUM)

  • Vulnerability published.

Collectors

NVD DatabaseMitre Database

Credit

Rafie Muhammad (Patchstack)
.