Lucene search
@huntrdevCVELIST:CVE-2023-3627HistoryJul 11, 2023 - 4:08 p.m.
CVE-2023-3627 Cross-Site Request Forgery (CSRF) in salesagility/suitecrm-core
2023-07-1116:08:59
CWE-352
@huntrdev
www.cve.org
cve-2023-3627
cross-site request forgery
github repository
salesagility/suitecrm-core
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
0.001 Low
EPSS
Percentile
27.3%
Cross-Site Request Forgery (CSRF) in GitHub repository salesagility/suitecrm-core prior to 8.3.1.
CNA Affected
[
{
"vendor": "salesagility",
"product": "salesagility/suitecrm-core",
"versions": [
{
"version": "unspecified",
"lessThan": "8.3.1",
"status": "affected",
"versionType": "custom"
}
]
}
]Related
osv
osv
BIT-suitecrm-2023-3627
2024-03-06 11:07:27
CVE-2023-3627
2023-07-11 17:15:13
huntr
huntr
CSRF on /api/graphql query executing the mutations through GET requests
2023-06-03 20:39:42
prion
prion
Cross site request forgery (csrf)
2023-07-11 17:15:00
nvd
nvd
CVE-2023-3627
2023-07-11 17:15:13
cve
cve
CVE-2023-3627
2023-07-11 17:15:13
8.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
0.001 Low
EPSS
Percentile
27.3%
Related for CVELIST:CVE-2023-3627