CVE-2023-47643 Scanner
CVE-2023-47643 Scanner - Information Disclosure vulnerability in SuiteCRM
Used 2k times · 3.3k assets checked · domain, ipv4, subdomain
CVE
CVE-2023-47643
5.3
CVSSlow
Exploitable remotely over the internet · low-privilege account sufficient.
Description
SuiteCRM is a Customer Relationship Management (CRM) software application. Prior to version 8.4.2, Graphql Introspection is enabled without authentication, exposing the scheme defining all object types, arguments, and functions. An attacker can obtain the GraphQL schema and understand the entire attack surface of the API, including sensitive fields such as UserHash. This issue is patched in version 8.4.2. There are no known workarounds.
Attack Vector
Network
Privileges Req.
Low
User Interaction
None
suitecrm-core
Updated Sep 28, 2026View on NVD →
S4E scanner
CVE history: suitecrm-core
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →