PatchTheCVEsendinblue vulnerabilities
Recent CVEs affecting sendinblue products. 1 tracked.
sendinblue has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2024-08-26. Highest priority: CVE-2024-43287 (score 18/100).
- CVE-2024-43287 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms
FAQ
How do I fix sendinblue vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sendinblue being exploited right now?
None of the tracked sendinblue CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sendinblue CVE should I patch first?
CVE-2024-43287 currently ranks highest (18/100): Cross-Site Request Forgery (CSRF) vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms.