CVE-2023-2140: Server-Side Request Forgery vulnerability affecting DELMIA Apriso Release 2017 through Release 2022

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-04-21 · updated 2026-06-17
Weakness: CWE-918

Description

A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apriso application.

Affected products

Dassault Systèmes DELMIA Apriso: from 2017 through 2022

References

https://www.3ds.com/vulnerability/advisories
https://www.3ds.com/vulnerability/advisories

Get alerted when CVE-2023-2140 or the next vulnerability affects your stack