CVE-2022-22552

Name of the Vulnerable Software and Affected Versions Dell EMC AppSync versions 3.9 to 4.3

Description The issue allows a remote unauthenticated attacker to potentially exploit a clickjacking vulnerability in AppSync, tricking the victim into executing state-changing operations.

Recommendations For Dell EMC AppSync versions 3.9 to 4.3, consider implementing additional security measures to prevent clickjacking attacks, such as validating user input and ensuring that all state-changing operations require explicit user confirmation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.