CVE-2023-30510 Authenticated Server-side Request Forgery in Aruba EdgeConnect Enterprise Web Management Interface

Medium 4.1 Published 16 May 2023 Updated 22 Jan 2025

Authenticated attackers can exploit SSRF in Aruba EdgeConnect Enterprise to disclose data via arbitrary URL requests.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-30510?

CVE-2023-30510 is a medium-severity server-side request forgery vulnerability in Hewlett Packard Enterprise (HPE) Aruba EdgeConnect Enterprise Software, published on 16 May 2023. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

A vulnerability exists in the Aruba EdgeConnect Enterprise web management interface that allows remote authenticated users to issue arbitrary URL requests from the Aruba EdgeConnect Enterprise instance. The impact of this vulnerability is limited to a subset of URLs which can result in the possible disclosure of data due to the network position of the Aruba EdgeConnect Enterprise instance.

Which versions are affected by CVE-2023-30510?

It affects 1 product.

Products include Arubanetworks Edgeconnect Enterprise.

How do I fix CVE-2023-30510?

No fix has been published for CVE-2023-30510 yet. Limit exposure of the affected software until one is available.

Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.

Is CVE-2023-30510 being exploited?

There is no known exploitation of CVE-2023-30510 in the wild and no public exploit code.

Sources

Also known as GHSA-8qmh-j762-78m5.