CVE-2023-2140
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Server-Side Request Forgery vulnerability affecting DELMIA Apriso Release 2017 through Release 2022
A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apriso application.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
DELMIA Apriso
- Vendor
- Dassault Systèmes
- Product
- DELMIA Apriso
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Apriso 2017 Golden | affected | custom | Unavailable | Apriso 2017 SP7 | None listed |
| Apriso 2018 Golden | affected | custom | Unavailable | Apriso 2018 SP4 | None listed |
| Apriso 2019 Golden | affected | custom | Unavailable | Apriso 2019 SP5 | None listed |
| Apriso 2020 Golden | affected | custom | Unavailable | Apriso 2020 SP4 | None listed |
| Apriso 2021 Golden | affected | custom | Unavailable | Apriso 2021 SP2 | None listed |
| Apriso 2022 Golden | affected | Unavailable | Unavailable | Unavailable | None listed |