CVE-2022-22552

CVSS 6.9 MEDIUMEPSS 0.7%CWE-1021

Dell EMC AppSync versions 3.9 to 4.3 contain a clickjacking vulnerability in AppSync. A remote unauthenticated attacker could potentially exploit this vulnerability to trick the victim into executing state changing operations.

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:H

Affected products

Dell · AppSync

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.dell.com/support/kbdoc/000195377