CVE-2023-3432

CriticalCVSS 10.0

Published: 27/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.74%

50th percentile - higher than 50% of all known CVEs

Summary

There is a Server-Side Request Forgery (SSRF) vulnerability in the GitHub repository plantuml/plantuml prior to version 1.2023.9. This may lead to unauthorized access to internal server resources.

Risk Assessment

Organizations may be exposed to attacks that allow attackers to access sensitive internal data or services, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade to version 1.2023.9 or later to mitigate this vulnerability.

Original NVD description (English source)

Server-Side Request Forgery (SSRF) in GitHub repository plantuml/plantuml prior to 1.2023.9.