CVE-2022-24424: Path Traversal
Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-24424?
CVE-2022-24424 has been classified as a medium severity vulnerability due to its potential to allow unauthorized file access.
How do I fix CVE-2022-24424?
To fix CVE-2022-24424, upgrade Dell EMC AppSync to version 4.4.0.0 or later.
What types of attacks can be executed using CVE-2022-24424?
CVE-2022-24424 can be exploited by remote unauthenticated attackers to perform path traversal attacks and access sensitive files.
Which versions of Dell EMC AppSync are affected by CVE-2022-24424?
Dell EMC AppSync versions from 3.9 to 4.3 are affected by CVE-2022-24424.
Is authentication required to exploit CVE-2022-24424?
No, CVE-2022-24424 can be exploited by remote attackers without authentication.