CVE-2023-47643

SuiteCRM is a Customer Relationship Management CRM software application. Prior to version 8.4.2, Graphql Introspection is enabled without authentication, exposing the scheme defining all object types, arguments, and functions. An attacker can obtain the GraphQL schema and understand the entire...

CVE-2023-47643

The SuiteCRM Customer Relationship Management software is vulnerable to unauthenticated GraphQL Introspection in versions prior to 8.4.2 . The root cause is that introspection is enabled without authentication, allowing an attacker to obtain the GraphQL schema and map the entire API attack surfac...