Path Traversal Vulnerability in Dell EMC AppSync Server

CVE-2022-24424

What is CVE-2022-24424?

Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability that allows an unauthenticated remote attacker to exploit the AppSync server. By taking advantage of this vulnerability, an attacker can potentially gain unauthorized read access to files located on the server's filesystem, executing actions with the privileges of the web application in use. This may lead to exposure of sensitive data and necessitates immediate attention and remediation.

References