could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apriso application.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Dassault Systèmes | DELMIA Apriso | unaffected |
|
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-33659 | A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apriso application. |
| Link | Providers |
|---|---|
| https://www.3ds.com/vulnerability/advisories |
|
Tue, 04 Feb 2025 21:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: 3DS
Published:
Updated: 2025-02-04T20:27:09.654Z
Reserved: 2023-04-18T07:52:26.003Z
Link: CVE-2023-2140
Vulnrichment
Updated: 2024-08-02T06:12:20.445Z
NVD
Status : Modified
Published: 2023-04-21T16:15:07.380
Modified: 2024-11-21T07:58:00.800
Link: CVE-2023-2140
Redhat
No data.
OpenCVE Enrichment
No data.