← CVE Intelligence

CVE-2023-2140

Server-Side Request Forgery vulnerability affecting DELMIA Apriso Release 2017 through Release 2022 PUBLISHED

Description (CNA)

A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apriso application.

Affected (CNA)

Vendor / productVersions
Dassault Systèmes / DELMIA Aprisoaffected Apriso 2017 Golden through Apriso 2017 SP7; affected Apriso 2018 Golden through Apriso 2018 SP4; affected Apriso 2019 Golden through Apriso 2019 SP5; affected Apriso 2020 Golden through Apriso 2020 SP4; affected Apriso 2021 Golden through Apriso 2021 SP2; affected Apriso 2022 Golden

CWE

CWE-918

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.