CVE-2023-2140 (published 2023-04-21T15:48:25.654Z)
A Server-Side Request Forgery vulnerability in DELMIA Apriso Release  2017 through Release 2022 

could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apriso application.

Affected products: Vendor: Dassault Systèmes
Product: DELMIA Apriso
Versions: Apriso 2017 Golden, Apriso 2018 Golden, Apriso 2019 Golden, Apriso 2020 Golden, Apriso 2021 Golden, Apriso 2022 Golden