CVE-2022-48310

概要

参考情報

• sophos.com/en-us/security-advisories/sophos-sa-20230301-scc-csrf · Vendor Advisory

connect のその他の脆弱性

• CVE-2022-4901中 6.1Multiple stored XSS vulnerabilities in Sophos Connect versions older than 2.2.90 allow Javascript code to run in the local UI via a maliciou…
• CVE-2022-48309中 4.3A CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect versions older than 2.2.90.
• CVE-2021-25265高 8.8A malicious website could execute code remotely in Sophos Connect Client before version 2.1.