Описание
Dell EMC AppSync versions 3.9 to 4.3 contain a clickjacking vulnerability in AppSync. A remote unauthenticated attacker could potentially exploit this vulnerability to trick the victim into executing state changing operations.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 4.4.0.0 (исключая)
cpe:2.3:a:dell:emc_appsync:*:*:*:*:*:*:*:*
EPSS
Процентиль: 43%
0.00209
Низкий
6.9 Medium
CVSS3
6.1 Medium
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-1021
CWE-1021
Связанные уязвимости
github
около 4 лет назад
Dell EMC AppSync versions 3.9 to 4.3 contain a clickjacking vulnerability in AppSync. A remote unauthenticated attacker could potentially exploit this vulnerability to trick the victim into executing state changing operations.
EPSS
Процентиль: 43%
0.00209
Низкий
6.9 Medium
CVSS3
6.1 Medium
CVSS3
5.8 Medium
CVSS2
Дефекты
CWE-1021
CWE-1021