CVE-2023-2140
Summary
| CVE | CVE-2023-2140 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-04-21 16:15:00 UTC |
| Updated | 2023-05-09 00:56:00 UTC |
| Description | A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apriso application. |
Risk And Classification
Problem Types: CWE-918
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | 3ds | Delmia Apriso | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Dassault Systèmes Security Advisories | Dassault Systèmes | MISC | www.3ds.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.