CVE-2024-43287

📊 4.3 MEDIUM⚡ 0.1%🎯 0 exploits

📅 Published Aug 26, 2024

📋 Status: Analyzed

Cross-Site Request Forgery (CSRF) vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue.This issue affects Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue: from n/a through 3.1.82.

CVSS v3.1 • [email protected]

🎯 Affected Products & Systems

1 product configurations affected

Filter by type:

Type	Vendor	Product	Version Range	Status	CPE String
📱App	sendinblue	newsletter\, smtp\, email marketing and subscribe	< 3.1.83 Target SW: wordpress	Vulnerable	cpe:2.3:a:sendinblue:newsletter\,_smtp\,_email_marketing_and_subscribe::::::wordpress::*

📱

sendinblue / newsletter\, smtp\, email marketing and subscribe

Application

Vulnerable

Version: < 3.1.83

Target SW: wordpress

CPE:

cpe:2.3:a:sendinblue:newsletter\,_smtp\,_email_marketing_and_subscribe:*:*:*:*:*:wordpress:*:*

Metrics

4.3 MEDIUMCVSS v3.1[email protected]

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Attack Vector:

NETWORK

Complexity:

LOW

Privileges:

NONE

User Interaction:

REQUIRED

Confidentiality:

NONE

Integrity:

LOW

Availability:

NONE

Scope:

UNCHANGED

🔍 Technical Details

Analysis Status

Analyzed

CVSS Details

4.3 (MEDIUM)v3.1

Source: [email protected]

EPSS Details

0.1% (Minimal)33.4th percentile

Last updated: Oct 30, 2025

Exploitation probability within 30 days

Published Date

Aug 26, 2024 (1 year ago)

Last Modified

Sep 12, 2024 (1 year ago)

Security Weaknesses1

CWE-352

References2

NVDadvisory