7.5
High
CVE-2022-24424 Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server
Description
Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AppSync 4.4 | earliest → < 4.4.0.0 | 4.4.0.0 |
Other CVEs of AppSync
The 12 CVEs of AppSync →
CVE-2026-32657
Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322,…
7.3
High
CVE-2026-22768
Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability
7.3
High
CVE-2026-22767
Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability
7.3
High
CVE-2025-32744
Dell AppSync, version(s) 4.6.0.0, contains an Unrestricted Upload of File with Dangerous Type vulnerability
6.6
Medium