CVE-2022-22552

Dell EMC AppSync versions 3.9 to 4.3 contain a clickjacking vulnerability in AppSync. A remote unauthenticated attacker could potentially exploit this vulnerability to trick the victim into executing state changing operations.

Score

CVSS 3.1 6.9 Medium

Status

Modified - security_alert@emc.com

Published

2022-01-21

Last modified

2024-09-17

Weaknesses

CWE-1021

Affected products

• Appsync (Dell)
• Emc Appsync (Dell)

References

• https://www.dell.com/support/kbdoc/000195377