CVE-2023-2140

Server-Side Request Forgery vulnerability affecting DELMIA Apriso Release 2017 through Release 2022

CVSS 7.5 HIGHEPSS 0.6%CWE-918

A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apriso application.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Dassault Systèmes · DELMIA Apriso

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.3ds.com/vulnerability/advisories