CVE-2023-3627: Cross-Site Request Forgery (CSRF) in salesagility/suitecrm-core
Published Jul 11, 2023
·Updated
Cross-Site Request Forgery (CSRF) in GitHub repository salesagility/suitecrm-core prior to 8.3.1.
Affected Software
1 affected component
SalesAgility SuiteCRM<8.3.1
Remediation
Event History
Jul 11, 2023
CVE Published
via MITRE·04:08 PM
Data Sourced
via MITRE·04:08 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-3627?
The severity of CVE-2023-3627 is high.
2
How does CVE-2023-3627 affect Salesagility SuiteCRM?
CVE-2023-3627 affects Salesagility SuiteCRM prior to version 8.3.1.
3
What is Cross-Site Request Forgery (CSRF)?
Cross-Site Request Forgery (CSRF) is an attack that forces an end user to execute unwanted actions on a web application in which they are authenticated.
4
How do I fix CVE-2023-3627 in Salesagility SuiteCRM?
To fix CVE-2023-3627 in Salesagility SuiteCRM, update to version 8.3.1 or later.
5
Where can I find more information about CVE-2023-3627?
You can find more information about CVE-2023-3627 at the following references: [GitHub commit](https://github.com/salesagility/suitecrm-core/commit/78285702d76317f081b1fbc59cb2754e93b9a4c3) and [Huntr bounty](https://huntr.dev/bounties/558b3dce-db03-47ba-b60b-c6eb578e04f1).