CVE-2022-48309

Description

A CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect versions older than 2.2.90.

Affected Platforms

Weakness Type

CWE-352, CWE-352

References

• https://www.sophos.com/en-us/security-advisories/sophos-sa-20230301-scc-csrf
• https://www.sophos.com/en-us/security-advisories/sophos-sa-20230301-scc-csrf