PT-2025-51834 · Netaxis · Netaxis Api Orchestrator

Published 2025-12-17 · Updated 2025-12-22 · CVE-2022-23851

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Netaxis API Orchestrator (APIO) versions prior to 0.19.3

Description The Netaxis API Orchestrator (APIO) software contains a flaw that permits server side template injection (SSTI). This issue could potentially allow an attacker to execute arbitrary code on the server.

Recommendations Update Netaxis API Orchestrator (APIO) to version 0.19.3 or later.

Exploit

Fix

Weakness Enumeration

CWE-1336

Related Identifiers

CVE-2022-23851

Affected Products

Netaxis Api Orchestrator

References · 7

• 🔥 https://blog.tig00r.me/post/CVE-2022-23851 · Exploit
• https://osv.dev/vulnerability/CVE-2022-23851 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23851 · Security Note
• https://twitter.com/CVEnew/status/2001350840540631284 · Twitter Post
• https://t.me/CVEtracker/40053 · Telegram Post
• https://twitter.com/cracbot/status/2003057987657867670 · Twitter Post
• https://netaxis.be/products/apio · Note