Unrestricted File Upload in Dell AppSync Affects Multiple Versions
CVE-2025-32744

6.6MEDIUM

Key Information:

Vendor

Dell
Status
Appsync
Vendor
CVE Published:
21 July 2025

What is CVE-2025-32744?

Dell AppSync version 4.6.0.0 is susceptible to a vulnerability that permits an unrestricted upload of files deemed dangerous. This flaw can be exploited by a highly privileged attacker with remote access, potentially resulting in unauthorized remote execution of commands. It is essential for organizations to apply necessary security updates to mitigate the risks associated with this vulnerability.

Affected Version(s)

AppSync < 4.6.0.4

References

https://www.dell.com/support/kbdoc/en-us/000345331/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell would like to thank Ahmed Y. Elmogy for reporting this issue
.
CVE-2025-32744 : Unrestricted File Upload in Dell AppSync Affects Multiple Versions