CVE-2023-3627

HighCVSS 8.8

Published: 11/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile - higher than 22% of all known CVEs

Summary

A Cross-Site Request Forgery (CSRF) vulnerability exists in the GitHub repository salesagility/suitecrm-core prior to version 8.3.1. An attacker could exploit this flaw to perform unauthorized actions on behalf of the user.

Risk Assessment

This vulnerability could lead to unauthorized access to application data or functions, posing a serious security threat to the organization.

Recommendation

It is recommended to upgrade to version 8.3.1 or later to mitigate this vulnerability and secure the application against potential attacks.

Other vulnerabilities in salesagility/suitecrm-core

CVE-2023-3293Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository salesagility/suitecrm-core prior to version 8.3.0, allowing for the storage of malicious code.

Original NVD description (English source)

Cross-Site Request Forgery (CSRF) in GitHub repository salesagility/suitecrm-core prior to 8.3.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS