Cross-Site Request Forgery (CSRF) vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue.This issue affects Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue: from n/a through 3.1.82.
References
| Link | Resource |
|---|---|
| https://patchstack.com/database/vulnerability/mailin/wordpress-brevo-plugin-3-1-82-cross-site-request-forgery-csrf-vulnerability?_s_id=cve | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
12 Sep 2024, 21:19
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Sendinblue
Sendinblue newsletter\, Smtp\, Email Marketing And Subscribe |
|
| References | () https://patchstack.com/database/vulnerability/mailin/wordpress-brevo-plugin-3-1-82-cross-site-request-forgery-csrf-vulnerability?_s_id=cve - Third Party Advisory | |
| CPE | cpe:2.3:a:sendinblue:newsletter\,_smtp\,_email_marketing_and_subscribe:*:*:*:*:*:wordpress:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
27 Aug 2024, 13:01
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
26 Aug 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-26 21:15
Updated : 2024-09-12 21:19
NVD link : CVE-2024-43287
Mitre link : CVE-2024-43287
CVE.ORG link : CVE-2024-43287
JSON object : View
Products Affected
sendinblue
- newsletter\,_smtp\,_email_marketing_and_subscribe
CWE
CWE-352
Cross-Site Request Forgery (CSRF)