CVE-2024-43287: Sendinblue Newsletter, Smtp, Email Marketing And Subscribe

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue.This issue affects Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue: from n/a through 3.1.82.

Affected products

• Sendinblue Newsletter, Smtp, Email Marketing And Subscribe: before 3.1.83 (fixed in 3.1.83)

Published 2024-08-26. Last modified 2026-06-17.