CVE-2023-35817 - Vulnerability Details

Vendors	Products
Devexpress	Devexpress

Link	Providers
https://code-white.com/public-vulnerability-list/
https://supportcenter.devexpress.com/ticket/details/t1157209/server-side-request-forgery-via-asyncdownloader
https://supportcenter.devexpress.com/ticket/details/t1161404/report-and-dashboard-server-improper-default-configuration-can-lead-to-ssrf-attacks
https://supportcenter.devexpress.com/ticket/details/t1162045/reporting-bi-dashboard-office-file-api-web-app-configuration-to-help-prevent-ssrf-attacks
https://supportcenter.devexpress.com/ticket/details/t394936/devexpress-security-advisory-updated-on-april-27-2023

Type	Values Removed	Values Added
First Time appeared		Devexpress Devexpress devexpress
CPEs		cpe:2.3:a:devexpress:devexpress:::::::: cpe:2.3:a:devexpress:devexpress:22.1.8:::::::* cpe:2.3:a:devexpress:devexpress:22.2.4:::::::* cpe:2.3:a:devexpress:devexpress:22.2.5:::::::*
Vendors & Products		Devexpress Devexpress devexpress

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
References		https://code-white.com/public-vulnerability-list/

Type	Values Removed	Values Added
Description		DevExpress before 23.1.3 allows AsyncDownloader SSRF.
Weaknesses		CWE-918
References		https://supportcenter.devexpress.com/ticket/details/t1157209/server-side-request-forgery-via-asyncdownloader https://supportcenter.devexpress.com/ticket/details/t1161404/report-and-dashboard-server-improper-default-configuration-can-lead-to-ssrf-attacks https://supportcenter.devexpress.com/ticket/details/t1162045/reporting-bi-dashboard-office-file-api-web-app-configuration-to-help-prevent-ssrf-attacks https://supportcenter.devexpress.com/ticket/details/t394936/devexpress-security-advisory-updated-on-april-27-2023
Metrics		cvssV3_1 `{'score': 5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N'}`

Show plain JSON

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-35817", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-04-28T18:03:18.175Z", "dateReserved": "2023-06-17T00:00:00.000Z", "datePublished": "2025-04-28T00:00:00.000Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "DevExpress", "vendor": "DevExpress", "versions": [{"lessThan": "21.2.12", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "22.1.7", "status": "unaffected", "version": "22", "versionType": "custom"}, {"lessThan": "22.1.9", "status": "affected", "version": "22.1.8", "versionType": "custom"}, {"lessThan": "22.2.3", "status": "affected", "version": "22.2", "versionType": "custom"}, {"lessThan": "22.2.6", "status": "affected", "version": "22.2.4", "versionType": "custom"}, {"lessThan": "23.1.3", "status": "affected", "version": "23", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "DevExpress before 23.1.3 allows AsyncDownloader SSRF."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-918", "description": "CWE-918 Server-Side Request Forgery (SSRF)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2025-04-28T16:12:35.996Z"}, "references": [{"url": "https://supportcenter.devexpress.com/ticket/details/t394936/devexpress-security-advisory-updated-on-april-27-2023"}, {"url": "https://supportcenter.devexpress.com/ticket/details/t1161404/report-and-dashboard-server-improper-default-configuration-can-lead-to-ssrf-attacks"}, {"url": "https://supportcenter.devexpress.com/ticket/details/t1162045/reporting-bi-dashboard-office-file-api-web-app-configuration-to-help-prevent-ssrf-attacks"}, {"url": "https://code-white.com/public-vulnerability-list/"}, {"url": "https://supportcenter.devexpress.com/ticket/details/t1157209/server-side-request-forgery-via-asyncdownloader"}], "x_generator": {"engine": "enrichogram 0.0.1"}, "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-04-28T18:02:56.672870Z", "id": "CVE-2023-35817", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-28T18:03:18.175Z"}}]}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2023-35817 (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

dateUpdated : 2025-04-28T18:03:18.175Z (string)

dateReserved : 2023-06-17T00:00:00.000Z (string)

datePublished : 2025-04-28T00:00:00.000Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : DevExpress (string)

vendor : DevExpress (string)

versions : [ »

0 : { »

lessThan : 21.2.12 (string)

status : affected (string)

version : 0 (string)

versionType : custom (string)

}

1 : { »

lessThan : 22.1.7 (string)

status : unaffected (string)

version : 22 (string)

versionType : custom (string)

}

2 : { »

lessThan : 22.1.9 (string)

status : affected (string)

version : 22.1.8 (string)

versionType : custom (string)

}

3 : { »

lessThan : 22.2.3 (string)

status : affected (string)

version : 22.2 (string)

versionType : custom (string)

}

4 : { »

lessThan : 22.2.6 (string)

status : affected (string)

version : 22.2.4 (string)

versionType : custom (string)

}

5 : { »

lessThan : 23.1.3 (string)

status : affected (string)

version : 23 (string)

versionType : custom (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : DevExpress before 23.1.3 allows AsyncDownloader SSRF. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-918 (string)

description : CWE-918 Server-Side Request Forgery (SSRF) (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2025-04-28T16:12:35.996Z (string)

}

references : [ »

0 : { »

url : https://supportcenter.devexpress.com/ticket/details/t394936/devexpress-security-advisory-updated-on-april-27-2023 (string)

}

1 : { »

url : https://supportcenter.devexpress.com/ticket/details/t1161404/report-and-dashboard-server-improper-default-configuration-can-lead-to-ssrf-attacks (string)

}

2 : { »

url : https://supportcenter.devexpress.com/ticket/details/t1162045/reporting-bi-dashboard-office-file-api-web-app-configuration-to-help-prevent-ssrf-attacks (string)

}

3 : { »

url : https://code-white.com/public-vulnerability-list/ (string)

}

4 : { »

url : https://supportcenter.devexpress.com/ticket/details/t1157209/server-side-request-forgery-via-asyncdownloader (string)

}

]

x_generator : { »

engine : enrichogram 0.0.1 (string)

}

metrics : [ »

0 : { »

cvssV3_1 : { »

version : 3.1 (string)

baseScore : 5 (number)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N (string)

}

]

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-04-28T18:02:56.672870Z (string)

id : CVE-2023-35817 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-28T18:03:18.175Z (string)

}

]

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-35817", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-04-28T18:02:56.672870Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-28T18:03:04.648Z"}}], "cna": {"metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N"}}], "affected": [{"vendor": "DevExpress", "product": "DevExpress", "versions": [{"status": "affected", "version": "0", "lessThan": "21.2.12", "versionType": "custom"}, {"status": "unaffected", "version": "22", "lessThan": "22.1.7", "versionType": "custom"}, {"status": "affected", "version": "22.1.8", "lessThan": "22.1.9", "versionType": "custom"}, {"status": "affected", "version": "22.2", "lessThan": "22.2.3", "versionType": "custom"}, {"status": "affected", "version": "22.2.4", "lessThan": "22.2.6", "versionType": "custom"}, {"status": "affected", "version": "23", "lessThan": "23.1.3", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://supportcenter.devexpress.com/ticket/details/t394936/devexpress-security-advisory-updated-on-april-27-2023"}, {"url": "https://supportcenter.devexpress.com/ticket/details/t1161404/report-and-dashboard-server-improper-default-configuration-can-lead-to-ssrf-attacks"}, {"url": "https://supportcenter.devexpress.com/ticket/details/t1162045/reporting-bi-dashboard-office-file-api-web-app-configuration-to-help-prevent-ssrf-attacks"}, {"url": "https://code-white.com/public-vulnerability-list/"}, {"url": "https://supportcenter.devexpress.com/ticket/details/t1157209/server-side-request-forgery-via-asyncdownloader"}], "x_generator": {"engine": "enrichogram 0.0.1"}, "descriptions": [{"lang": "en", "value": "DevExpress before 23.1.3 allows AsyncDownloader SSRF."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-918", "description": "CWE-918 Server-Side Request Forgery (SSRF)"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2025-04-28T16:12:35.996Z"}}}, "cveMetadata": {"cveId": "CVE-2023-35817", "state": "PUBLISHED", "dateUpdated": "2025-04-28T18:03:18.175Z", "dateReserved": "2023-06-17T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2025-04-28T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-35817 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-04-28T18:02:56.672870Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-04-28T18:03:04.648Z (string)

}

]

cna : { »

metrics : [ »

0 : { »

cvssV3_1 : { »

version : 3.1 (string)

baseScore : 5 (number)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N (string)

}

]

affected : [ »

0 : { »

vendor : DevExpress (string)

product : DevExpress (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 21.2.12 (string)

versionType : custom (string)

}

1 : { »

status : unaffected (string)

version : 22 (string)

lessThan : 22.1.7 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 22.1.8 (string)

lessThan : 22.1.9 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 22.2 (string)

lessThan : 22.2.3 (string)

versionType : custom (string)

}

4 : { »

status : affected (string)

version : 22.2.4 (string)

lessThan : 22.2.6 (string)

versionType : custom (string)

}

5 : { »

status : affected (string)

version : 23 (string)

lessThan : 23.1.3 (string)

versionType : custom (string)

}

]

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://supportcenter.devexpress.com/ticket/details/t394936/devexpress-security-advisory-updated-on-april-27-2023 (string)

}

1 : { »

url : https://supportcenter.devexpress.com/ticket/details/t1161404/report-and-dashboard-server-improper-default-configuration-can-lead-to-ssrf-attacks (string)

}

2 : { »

url : https://supportcenter.devexpress.com/ticket/details/t1162045/reporting-bi-dashboard-office-file-api-web-app-configuration-to-help-prevent-ssrf-attacks (string)

}

3 : { »

url : https://code-white.com/public-vulnerability-list/ (string)

}

4 : { »

url : https://supportcenter.devexpress.com/ticket/details/t1157209/server-side-request-forgery-via-asyncdownloader (string)

}

]

x_generator : { »

engine : enrichogram 0.0.1 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : DevExpress before 23.1.3 allows AsyncDownloader SSRF. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-918 (string)

description : CWE-918 Server-Side Request Forgery (SSRF) (string)

}

]

}

]

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2025-04-28T16:12:35.996Z (string)

}

cveMetadata : { »

cveId : CVE-2023-35817 (string)

state : PUBLISHED (string)

dateUpdated : 2025-04-28T18:03:18.175Z (string)

dateReserved : 2023-06-17T00:00:00.000Z (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

datePublished : 2025-04-28T00:00:00.000Z (string)

assignerShortName : mitre (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:devexpress:devexpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "A8A17F8A-D0F9-44E3-9B01-B45C891A0BAC", "versionEndExcluding": "21.2.12", "vulnerable": true}, {"criteria": "cpe:2.3:a:devexpress:devexpress:22.1.8:*:*:*:*:*:*:*", "matchCriteriaId": "2727DAD4-78F4-459D-A92A-A33D11021FEC", "vulnerable": true}, {"criteria": "cpe:2.3:a:devexpress:devexpress:22.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "F5FA2CF5-4136-460C-841E-E38330CD4F33", "vulnerable": true}, {"criteria": "cpe:2.3:a:devexpress:devexpress:22.2.5:*:*:*:*:*:*:*", "matchCriteriaId": "B81D56FB-7444-4436-9431-94D3DD48300E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "DevExpress before 23.1.3 allows AsyncDownloader SSRF."}, {"lang": "es", "value": "DevExpress anterior a 23.1.3 permite AsyncDownloader SSRF."}], "id": "CVE-2023-35817", "lastModified": "2025-06-05T14:30:31.390", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.1, "impactScore": 1.4, "source": "cve@mitre.org", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2025-04-28T16:15:26.753", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://code-white.com/public-vulnerability-list/"}, {"source": "cve@mitre.org", "tags": ["Permissions Required"], "url": "https://supportcenter.devexpress.com/ticket/details/t1157209/server-side-request-forgery-via-asyncdownloader"}, {"source": "cve@mitre.org", "tags": ["Permissions Required"], "url": "https://supportcenter.devexpress.com/ticket/details/t1161404/report-and-dashboard-server-improper-default-configuration-can-lead-to-ssrf-attacks"}, {"source": "cve@mitre.org", "tags": ["Permissions Required"], "url": "https://supportcenter.devexpress.com/ticket/details/t1162045/reporting-bi-dashboard-office-file-api-web-app-configuration-to-help-prevent-ssrf-attacks"}, {"source": "cve@mitre.org", "tags": ["Permissions Required"], "url": "https://supportcenter.devexpress.com/ticket/details/t394936/devexpress-security-advisory-updated-on-april-27-2023"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "cve@mitre.org", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:devexpress:devexpress:*:*:*:*:*:*:*:* (string)

matchCriteriaId : A8A17F8A-D0F9-44E3-9B01-B45C891A0BAC (string)

versionEndExcluding : 21.2.12 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:devexpress:devexpress:22.1.8:*:*:*:*:*:*:* (string)

matchCriteriaId : 2727DAD4-78F4-459D-A92A-A33D11021FEC (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:devexpress:devexpress:22.2.4:*:*:*:*:*:*:* (string)

matchCriteriaId : F5FA2CF5-4136-460C-841E-E38330CD4F33 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:devexpress:devexpress:22.2.5:*:*:*:*:*:*:* (string)

matchCriteriaId : B81D56FB-7444-4436-9431-94D3DD48300E (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : DevExpress before 23.1.3 allows AsyncDownloader SSRF. (string)

}

1 : { »

lang : es (string)

value : DevExpress anterior a 23.1.3 permite AsyncDownloader SSRF. (string)

}

]

id : CVE-2023-35817 (string)

lastModified : 2025-06-05T14:30:31.390 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 3.1 (number)

impactScore : 1.4 (number)

source : cve@mitre.org (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2025-04-28T16:15:26.753 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://code-white.com/public-vulnerability-list/ (string)

}

1 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Permissions Required (string)

]

url : https://supportcenter.devexpress.com/ticket/details/t1157209/server-side-request-forgery-via-asyncdownloader (string)

}

2 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Permissions Required (string)

]

url : https://supportcenter.devexpress.com/ticket/details/t1161404/report-and-dashboard-server-improper-default-configuration-can-lead-to-ssrf-attacks (string)

}

3 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Permissions Required (string)

]

url : https://supportcenter.devexpress.com/ticket/details/t1162045/reporting-bi-dashboard-office-file-api-web-app-configuration-to-help-prevent-ssrf-attacks (string)

}

4 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Permissions Required (string)

]

url : https://supportcenter.devexpress.com/ticket/details/t394936/devexpress-security-advisory-updated-on-april-27-2023 (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-918 (string)

}

]

source : cve@mitre.org (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object