CVE-2026-13243: CWE-352 Cross-Site Request Forgery (CSRF) in Drupal Salesforce Suite
CVE-2026-13243 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Drupal Salesforce Suite. The vulnerability allows an attacker to perform unauthorized actions on behalf of an authenticated user. It affects Salesforce Suite versions from 0.0.0 up to 5.1.3. The product is a cloud service, and a patch is available. No known exploits are reported in the wild. No CVSS score is provided.
AI Analysis
Technical Summary
This vulnerability (CVE-2026-13243) in the Drupal Salesforce Suite is classified as CWE-352, indicating a Cross-Site Request Forgery issue. It affects versions from 0.0.0 through 5.1.3. The vulnerability allows attackers to trick authenticated users into submitting unwanted requests, potentially leading to unauthorized actions within the Salesforce Suite integration. The product is cloud-hosted, and the vendor manages remediation. Although no detailed CVSS score is available, the vulnerability is recognized and a patch exists.
Potential Impact
Successful exploitation of this CSRF vulnerability could allow attackers to perform unauthorized actions within the Drupal Salesforce Suite on behalf of authenticated users. This could lead to unauthorized data manipulation or other unintended operations within the affected cloud service. No known active exploitation has been reported.
Mitigation Recommendations
Since the Salesforce Suite is a cloud-hosted service, the vendor manages remediation and typically applies patches server-side. A patch is available for this vulnerability. Users should verify with the vendor advisory that their instance has been updated. No additional action is required if the vendor has applied the patch.
CVE-2026-13243: CWE-352 Cross-Site Request Forgery (CSRF) in Drupal Salesforce Suite
Description
CVE-2026-13243 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Drupal Salesforce Suite. The vulnerability allows an attacker to perform unauthorized actions on behalf of an authenticated user. It affects Salesforce Suite versions from 0.0.0 up to 5.1.3. The product is a cloud service, and a patch is available. No known exploits are reported in the wild. No CVSS score is provided.
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2026-13243) in the Drupal Salesforce Suite is classified as CWE-352, indicating a Cross-Site Request Forgery issue. It affects versions from 0.0.0 through 5.1.3. The vulnerability allows attackers to trick authenticated users into submitting unwanted requests, potentially leading to unauthorized actions within the Salesforce Suite integration. The product is cloud-hosted, and the vendor manages remediation. Although no detailed CVSS score is available, the vulnerability is recognized and a patch exists.
Potential Impact
Successful exploitation of this CSRF vulnerability could allow attackers to perform unauthorized actions within the Drupal Salesforce Suite on behalf of authenticated users. This could lead to unauthorized data manipulation or other unintended operations within the affected cloud service. No known active exploitation has been reported.
Mitigation Recommendations
Since the Salesforce Suite is a cloud-hosted service, the vendor manages remediation and typically applies patches server-side. A patch is available for this vulnerability. Users should verify with the vendor advisory that their instance has been updated. No additional action is required if the vendor has applied the patch.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- drupal
- Date Reserved
- 2026-06-24T18:00:16.032Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
- Is Cloud Service
- true
Threat ID: 6a516c2b68715ace434381b8
Added to database: 07/10/2026, 22:03:23 UTC
Last enriched: 07/10/2026, 22:33:22 UTC
Last updated: 07/11/2026, 00:48:10 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.