medium4.3
CVE-2022-48309
A CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect versions older than 2.2.90.
Impact
A CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect versions older than 2.2.90.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sophos | Connect | before 2.2.90 |