Server-Side Request Forgery Vulnerability in DELMIA Apriso: Unauthorized Host Requests

CVE-2023-2140 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apriso application.

Learn more about our Cis Benchmark Audit For Server Software.