CVE-2014-10008: Multiple cross-site request forgery (CSRF) vulnerabilities in Stark CRM 1.0 allow remote attackers to hijac...

Security readout for executives and security teams

CVE-2014-10008 affects Stark CRM 1.0. A malicious site could cause a logged-in administrator’s browser to submit unauthorized Stark CRM requests, including adding administrative or user-type accounts. Business risk exists mainly where this legacy CRM is still deployed and reachable by administrators. Exposure is likely limited to organizations still running Stark CRM 1.0, especially internet-accessible or intranet CRM panels used by administrators. The bundle does not provide CPEs, vendor ownership, or evidence of current widespread deployment. Treat as a targeted legacy-application risk. Prioritize validation if Stark CRM 1.0 is still used for customer, partner, or operational data, or if its admin panel is reachable by users who browse email or the web on the same device. Mitigation focus: Identify any Stark CRM 1.0 deployments and administrative access paths.; Check vendor or maintainer guidance for an official fix or upgrade path.; Restrict CRM administration to trusted networks or VPN access..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.