CVE-2023-35817: SSRF
Published Apr 28, 2025
·Updated
DevExpress before 23.1.3 allows AsyncDownloader SSRF.
Affected Software
5 affected components
DevExpress DevExpress<23.1.3
DevExpress DevExpress<21.2.12
DevExpress DevExpress=22.1.8
DevExpress DevExpress=22.2.4
DevExpress DevExpress=22.2.5
Event History
Apr 28, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-35817?
CVE-2023-35817 has been identified as a security vulnerability that could potentially allow Server-Side Request Forgery (SSRF) attacks.
2
How do I fix CVE-2023-35817?
To mitigate CVE-2023-35817, upgrade to DevExpress version 23.1.3 or later.
3
What type of attack is associated with CVE-2023-35817?
CVE-2023-35817 is associated with Server-Side Request Forgery (SSRF) attacks.
4
What software is affected by CVE-2023-35817?
CVE-2023-35817 affects all versions of DevExpress prior to 23.1.3.
5
What are the potential risks of CVE-2023-35817?
The potential risks include unauthorized access to internal services and data leakage due to SSRF vulnerabilities.