CVE-2023-2140CWE-918

Server-Side Request Forgery vulnerability affecting DELMIA Apriso Release 2017 through Release 2022

High · published April 21, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
46.0
In the wild
Unconfirmed
What it is

A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022

could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apriso application.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00563 · 46.0th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2023-04-21T15:48Z
EPSS history
Timeline
  • 21 APR 15:48Z
    Server-Side Request Forgery vulnerability affecting DELMIA Apriso Release 2017 through Release 2022
    cvelistv5