CVE Catalog

CVE-2022-23851

Critical
Published: Translated: NVD NIST

Summary

Netaxis API Orchestrator (APIO) before version 0.19.3 is vulnerable to Server Side Template Injection (SSTI).

Risk Assessment

An attacker can execute arbitrary code on the server, potentially leading to system compromise and data breach.

Recommendation

Upgrade Netaxis API Orchestrator to version 0.19.3 or later.

Original NVD description (English source)

Netaxis API Orchestrator (APIO) before 0.19.3 allows server side template injection (SSTI).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS